WordPress AI Connector
Connecting an AI assistant to your website means giving something a way in, and you should know exactly what that is before you do it. On WordPress it is one credential, it belongs to you, and you can take it back at any moment without touching anything else on the site.
What WordPress asks for
An application password you create in your own profile and can revoke at any time. It is not your login password, and it can be withdrawn without changing anything else.
Taking it back
Revoking is immediate and it is yours to do: the credential is removed on your own WordPress site, not requested from us. The next action the assistant attempts fails, the connection reports itself as broken, and nothing else on your website changes. There is no notice period and nothing to cancel first.
What the assistant can and cannot see
The assistant never receives your credential. It asks this connector for an action; the connector checks the action against what you authorised and then uses the credential itself. The credential is encrypted at rest and tied to the single website it was given for, so a copy of it taken from anywhere else is of no use.
What the platform does not allow
Sites without pretty permalinks answer at /?rest_route= instead of /wp-json; both are handled. A host firewall that rejects unfamiliar clients can block the connection entirely.
Everything above describes what WordPress’s interface offers. None of it is marked verified yet, which in this product means exercised against a live installation with the date recorded.
Common questions
Do I give an AI company my WordPress password?
No, and not to us either in the usual sense. WordPress issues a separate credential for this, you create it yourself, and it is encrypted the moment it reaches us. Your login password is not involved and is never asked for.
What happens if I revoke it?
The connection stops working and nothing else does. Content already created stays exactly as it is — it is ordinary WordPress content, not something held by us. You can issue a new credential later and carry on.
Can one credential reach more than one website?
No. Each credential is bound to the one website it was created for, so a licence for one WordPress site cannot quietly be used on another — and a credential that leaked could not be either.
Getting started with WordPress AI Agent
WordPress AI Agent is not on sale yet. The product page tracks where it stands, and nothing is advertised before it works.