DraftPilot AI Site Editor

DraftPilot AI Site Editor turns one sentence about your business into a complete, editable website.

Write a short brief (“A family-run plumbing company in Austin offering repairs, installation and 24/7 emergency service”) and the plugin will:

• Plan 3–6 pages (Home, Services, About, Contact, and more) that make sense for the business.

• Write specific, believable copy for every section.

• Apply a cohesive color palette and font pairing.

• Create every page as a draft, then wire up a navigation menu and set the front page.

• Let you refine any page in the block editor, or add a whole new section with one sentence.

Built on the WordPress core AI Client. 0, so the plugin never stores API keys or provider credentials. Install an AI provider plugin of your choice and connect it under Settings → Connectors — the core AI Client handles models, keys, and billing.

Safe by design.

• Block registry — the AI may only emit a whitelist of block types (core blocks + 8 DraftPilot designer blocks). Everything is validated before it is saved; nothing raw from the LLM reaches the database.

• No prompt injection — page content generated by the AI is stored as data (JSON block attributes), never executed as code.

• Sanitized output — design tokens are validated against an allowlist before they are output as inline CSS, and all admin/editor scripts are properly enqueued.

REST API

All endpoints live under /wp-json/draftpilot-ai/v1 and require manage_options:

• POST /generate-site { "brief": "..." } → create a generation job

• GET /job/{id} → poll job status

• POST /add-section { "page_id": 4, "prompt": "..." } → append AI blocks to a page

• GET /pages → list generated pages

• POST /pages/delete-all → permanently delete generated pages

• POST /pages/trash { "page_id": 4 } → trash one page

• GET /nav-menu → list menus

-

POST /nav-menu { "page_ids": [4,5], "name": "DraftPilot Site", "location": "primary" } → create or update a menu

POST /generate-site queues a WP-Cron job and returns a job ID with HTTP 202. Only one generation runs at a time; a second request while a job is in flight returns HTTP 409. Poll GET /job/{id} for progress.

Abilities

9+ the plugin registers two abilities that agents and tooling can call with validated input and output:

-

draftpilot-ai/plan-site — turns a business brief into a normalized brief plus a page plan. Read-only; it creates nothing.

• draftpilot-ai/add-section — generates one section and appends it to an existing page. Requires permission to edit that page.

Both require a connected AI provider. plan-site requires edit_pages; add-section is checked per page with edit_post.

Privacy

DraftPilot AI transmits data to the AI provider you connect. Review how your provider handles your data before generating.

• Data you send. The business brief you type, your site name and description, and the content generated from them are sent to the AI provider connected under Settings → Connectors using the WordPress core AI Client. The plugin does not transmit anything to the plugin author.

• What is stored. Plugin settings (creativity level, site slug) and your generated pages. No API keys or provider credentials are stored by the plugin.

• Full text. See the Privacy tab in the DraftPilot AI admin for the complete Terms of Service, Privacy Policy, and data provider list.