About this plugin
GOMAX Connect is a free, single standalone plugin. Every feature described here is included for free and nothing is locked behind an upgrade.
Free vs paid: this plugin (GOMAX Connect) is free. com/gomax-shop/. They are not required to use this plugin.
The plugin shows a single, non-intrusive “Upgrade” tab and a small promo on its own admin page only; it does not add admin-wide banners, popups, or collect any data without consent.
The plugin exposes the REST namespace:
gomax-connect/v1
The OpenAPI schema endpoint is:
/wp-json/gomax-connect/v1/schema
The schema is generated dynamically from Settings > GOMAX Connect > Tool Access. Disabled actions are removed from the schema and are blocked at runtime.
Upgrades
GOMAX Connect is free. If you want more, two optional paid products are available on our website:
- GOMAX PRO — advanced AI agents, business automation, content generation, SEO and WooCommerce assistants. https://thebuzzbazaar.com/produkt/gomax-pro/
- GOMAX Ultimate — the full business operating system: 400+ actions, multi-agent teams, brain memory, Elementor AI builder, WooCommerce automation, and local analytics/CRM/email/SMS. https://thebuzzbazaar.com/produkt/gomax-ultimate/
com/gomax-shop/ and are entirely optional. No free feature of this plugin requires them.
Endpoints
- GET /schema
- POST /content
- POST /manage
- POST /media-upload
- POST /elementor
- POST /forms
- POST /woocommerce
- POST /users
- POST /seo
- POST /backup
- POST /cache
- POST /https
- GET|POST /ai-engine
Security
The plugin uses standard WordPress authentication for REST requests, including Application Passwords and Basic Auth handled by WordPress. Administrative capability checks are enforced for REST calls. WooCommerce calls may use WooCommerce management capability, and site administrators always work.
htaccess editing, WordPress core/plugin/theme file editing, or direct SQL execution.
The HTTPS tool only supports HTTPS URLs. It blocks localhost, loopback, private IP ranges, reserved/internal IP ranges and unresolved hosts. Public hosts must be explicitly allow-listed unless “Allow any public HTTPS host” is enabled.
AI Engine
When Meow Apps AI Engine is active and the option is enabled, the plugin registers:
gomaxConnectTool
The function can call only tools enabled in GOMAX Connect settings. Public/frontend write actions are blocked by default unless the visitor is a logged-in administrator.