One OAuth Relay for Your Managed WordPress Sites
Run VideoWhisper Site Manager Server on your own WordPress installation. Connect compatible AI apps through browser OAuth and route tools to the site you select.
Built for agencies, developers and site operators
- Browser OAuth with PKCE, dynamic client registration, consent and token management.
- A shared MCP endpoint with explicit site selection and per-site read/write/administrator checks.
- Account and connected-site controls, revocation, rate limits and permission-aware tool discovery.
- Discovery diagnostics distinguish a failed upstream request from a verified empty tool catalog, helping operators find connection issues without exposing credentials or remote response bodies.
- An account-status page with copy buttons, section links and expandable ChatGPT, Claude, Codex, Grok and conditional Grok Bot guidance.
Server does not grant every tool on every site. The selected site must expose and authorize the operation. Current relay scopes and site permissions remain separate from Free’s versioned local per-client tool grants; a universal versioned relay consent model is future work.
Optional reviewed package distribution
Server includes the same private distribution module as Site Manager Pro for a local WordPress host that also runs Free 1.5.2+ and the relevant optional dependencies. It can expose administrator-reviewed Live Support Tickets CRM download list/get/add/update tools, including verified replacement files, and connected VideoWhisper Updater list/refresh/prepare/apply tools.
Remote managed sites require their own Pro or Server companion for these operations. Live Support Tickets supplies a generic catalog extension API; it does not register these private AI tools itself.
- Off by default, with native administrator review of exact tools and package slugs. Safe Drafts excludes distribution tools.
- CRM records use revision checks and preserve omitted access restrictions and metadata. New downloads start disabled; public access requires explicit acknowledgement.
- Plugin/theme ZIPs are checked for identity, version, unsafe paths and SHA256. Files are at most 5 MiB and stored outside the web root.
- Updater prepare validates an entitled newer version without installing. Apply requires the exact reviewed hash and a one-use, 10-minute token, then rechecks account, permissions, entitlement and target.
The installer updates existing plugins through WordPress and preserves activation. Back up and review package code before applying it. This release does not automate a fleet rollout or guarantee rollback. Requires CRM 1.12.11+ / Updater 1.1.0+ for the respective optional services.
A clear route from account to first request
- Install and configure Server on the authorization host, then register and link each client site using Free’s supported onboarding flow.
- Open Account Status, check the linked account/site and copy the shared MCP URL.
- Expand only your app’s instructions, complete browser sign-in and review requested access.
- Ask for site context and select a site explicitly. Test read-only access and a private draft before enabling broader actions.
For xAI, Grok.com Connectors and Grok Bot Connect apps are separate interfaces. Grok Bot custom MCP support depends on the available product/account setup; use its current guide.
Requires WordPress 6.9+ and PHP 8.2+. Native WordPress Abilities and the optional MCP Adapter are a separate integration on each site; a Site Manager OAuth token does not automatically authorize the native Adapter endpoint.
Recover from temporary catalog failures
Server 1.1.6 retries only read-only tools/list discovery once per affected site, with at most two extra requests per server request and a two-second timeout per retry. Authentication denials, rate limits and write operations are not retried automatically. Per-site health distinguishes verified catalogs from unknown support. If every linked site’s discovery fails, the server returns an explicit error instead of presenting basic tools as a complete catalog. Healthy sites remain usable during a partial outage. Client refresh behavior varies; follow retry_after and retry only once.
Free, Pro and Server have different jobs
Free includes a complete local MCP/REST connection, local OAuth, per-tool consent, Safe Drafts, editorial tools and optional reviewed native abilities. Pro extends a site with deeper management, media/context workflows and optional distribution tools. Server provides the shared authorization/relay across several managed sites and the optional local distribution module.
Several independently managed sites are distinct from a WordPress Multisite network. Server is not required for Free local OAuth.
The optional Turnkey service at server.promptaur.com provides the shared relay route. Check its current account availability and terms during onboarding; local OAuth remains available in Free.
Includes Site Manager Server (1 server), Site Manager Pro and Agentic Optimization Pro for up to 10 sites. Review plan details.