Automatio Connect

Description

Automatio is a service whose AI agent can work on your WordPress site once you connect it, using WordPress’s own REST API and an Application Password you approve on WordPress’s own screen. What the agent can do there depends on the permissions of the WordPress user you connected and on switches in your Automatio account (changing plugins, for example, is off until you turn it on for that site). You can revoke the Application Password at any time.

This plugin is an optional helper for that connection. WordPress’s REST API does not tell a connected service which updates are waiting or whether the site allows file changes, so the plugin reports them.

What it adds

• A report: the plugin, WordPress and PHP versions, whether the site allows file changes, and how many plugin and theme updates WordPress already knows about.
• The list of those updates (which plugin or theme, the version it has and the version on offer). It is the list WordPress shows on its own Updates screen. No download address is included.
• A settings screen, Settings → Automatio Connect, with the same report and a button that opens Automatio’s connect page with your site’s address filled in.

What it does not do

It has no route that changes your site. It cannot install, update, activate, switch or delete a plugin or a theme, cannot change settings, content, users or files, and cannot add CSS, JavaScript or PHP. Both of its routes are read-only (GET) and each needs the permission of the WordPress screen that shows the same facts (Site Health for the report, the Updates screen for the list). It stores no options of its own. It does not connect your site by itself, sends nothing to Automatio, and does not phone home.

Updates are applied by you, from Dashboard → Updates.

External services

This plugin makes no requests to any service of its own.

The settings screen has a link, “Connect this site to Automatio”, that opens https://automatio.ai/integrations in a new tab. Nothing is sent until you click it, and the link carries only your site’s address. Automatio’s terms are at https://automatio.ai/terms-of-service and its privacy policy at https://automatio.ai/privacy.

When you connect a site to Automatio, Automatio’s servers call this site’s REST API with an Application Password you approved on WordPress’s own screen. You can revoke that password at any time under Users → Profile → Application Passwords.

When the connected agent asks for the list of pending updates with refresh, WordPress itself runs its own update check and contacts api.wordpress.org, exactly as it does twice a day on its own.