Connect WordPress

Before you start

• WordPress 6.2 or newer, and PHP 7.4 or newer.
• The site must be served over HTTPS: WordPress only offers application passwords over HTTPS.
• A WordPress administrator login. SAR can do what that user can, and nothing more.
• You need to be an owner or admin of your organization in SAR.
• WooCommerce is optional. When it runs, products, orders and stock come through the same connection.

Install the plugin

1. Find the pluginChoose Start free on this site and type your address: your site's plugin page opens, searching for SAR Intelligence. If it does not show up, choose Download SAR Intelligence in SAR, under Connections → Connect WordPress.
2. Upload it, if you downloaded itIn wp-admin, open Plugins → Add New Plugin → Upload Plugin, choose the file and select Install Now.
3. Activate itChoose Activate. From then on, its updates appear under Plugins, like any other plugin's.

Connect the site

1. Open Connections in SARChoose Connect WordPress, or Add a site in the Sites table if a site is already connected.
2. Enter the addressEnter the address your site opens on and choose Continue to WordPress. SAR first checks that the plugin is active.
3. Approve on WordPress's screenWordPress's own approval screen opens. Sign in as an administrator and approve. WordPress creates an application password named "SAR Intelligence (your organization)" and hands it straight to SAR.
4. Back in SARYou see that WordPress is connected. ChatGPT and Claude can now read the site.

Nobody types, copies or sees a password. If you decline on WordPress, nothing is connected.

Decide whether changes are allowed

The site connects read-only. If you want ChatGPT or Claude to make changes, an owner or admin chooses Allow changes on the site's card in Connections and confirms.

• Owners' and admins' AI apps can then write drafts and edit posts, pages and products.
• Anything visitors would see, such as publishing, prices and stock, waits for your approval in SAR.
• Every change can be undone for 30 days.
• Make read-only stops changes straight away; reading carries on.

Every kind of change and who approves it: Safety and approvals.

Several sites and multisite

• Each site is one connection. For a second site, choose Connect another WordPress site and follow the same steps.
• The same site cannot be connected twice to one organization, so the AI app always knows which site you mean.
• On a WordPress Multisite network, each site of the network connects on its own. Connections shows whether it is the main site or a site of the network, and SAR works on that site only.
• For sites of different businesses, use separate organizations. See Agencies and clients.

The plugin's screen in wp-admin

Under Tools → SAR Intelligence, the site's administrator can see and stop what SAR does, from inside WordPress:

• Connections: which SAR organizations are connected, through which user, with a Disconnect button that revokes the application password at once.
• Connection check: checks HTTPS, application passwords, the REST API, the Authorization header and security plugin settings that block the connection, from inside the site.
• Backups before risky changes: whether such a change only warns or waits for a recent backup.
• Snippets waiting to be switched on: code SAR wrote, kept switched off until you switch it on.
• Recent changes and Activity: every change SAR made, in a log that cannot be edited.

In SAR, the Sites table in Connections shows the plugin's version, when the site was last checked, and the Check access and Remove buttons. If something does not connect, see Troubleshooting.