About this plugin
People increasingly ask an AI assistant — ChatGPT, Claude and others — to find them a used car or a flat. Isto Intents Holder lets such an assistant ask your listing site to keep looking for that person, under an open interface (Isto Intents, consent-link profile).
- The assistant sends your site the wish in the person’s own words (“estate car, petrol, up to 15 000 EUR”) — and nothing else: no name, e-mail or phone.
- Your site answers with a link to its own confirmation page. The person enters their e-mail there, ticks the consent and confirms it from the e-mail (double opt-in).
- Once an hour the plugin compares every confirmed wish with your newest listings and e-mails those that fit, each once, with a link to stop. The assistant can show the same listings, and every link leads to your listing page.
The person stays your visitor and your subscriber. Contact data is entered only on your site.
Features
- MCP server (Streamable HTTP) with the four tools of the consent-link profile: intent_publish_intent, intent_get_intent, intent_list_matches, intent_withdraw_intent.
- Confirmation page (shortcode [isto_intents_consent], created on activation) with double opt-in; a link opened by a mail scanner confirms nothing.
- Holder descriptor at /.well-known/isto-intents.json, so assistants and the Isto Intents Registry can find you by country and category.
- Matching against any post type, with an optional price field; replace it with your own search through the isto_intents_holder_find_matches filter.
- No setup for the listings of Motors, Car Dealer (Potenza), Auto Listings, Houzez, RealHomes, WP Residence, WP Pro Real Estate 7, Estatik, Essential Real Estate and Easy Property Listings: the plugin recognises their post type, price and address fields, and the currency where the theme or plugin states one. Where they let a seller withhold the price, a withheld price is never passed on; where they mark a listing as sold, it is not sent.
- A private price limit is sealed the moment it arrives (libsodium secretbox, under a key of your site) and opened only in memory to filter your listings: it is never returned to the assistant, never shown on a page and never stored as a number.
- Limits per network, and a separate limit for the signed calls of the Isto Intents forwarder.
- Privacy tools: export and erasure of a person’s wishes; the e-mail address is deleted as soon as a wish ends; deactivating the plugin ends every wish (nothing would run to stop or expire them); deleting the plugin deletes all its data.
- The confirmation page sends Referrer-Policy: no-referrer, because its address carries a one-time token. Keep analytics and tracking scripts off that page: tools that record the full page address would record the token.
- E-mails through wp_mail(), so your SMTP plugin applies.
- Translations: English, Slovak, Czech, German, Hungarian, Polish.
External services
org, operated by AutoIsto s. r. , and only when an administrator presses one of two buttons on Settings → Isto Intents:
- Check readiness sends your site’s host name to https://istointents.org/registry/v0/check. The registry then reads your public descriptor and calls your public MCP server once with a test wish, which it withdraws at once.
- Submit to the registry sends your site’s host name to https://istointents.org/registry/v0/submit. The registry lists your host and re-checks your public descriptor and MCP server about every six hours.
Nothing else is sent: no data about people, wishes, users or visitors. com/privacy/
com) call your site’s public MCP endpoint on their own; the plugin answers them but does not contact them. org/forwarding/terms/