About this plugin
Kitful lets you connect a WordPress site to your Kitful workspace and receive posts published from Kitful.
Features
- Connect WordPress to your Kitful workspace in a few clicks
- Publish Kitful articles to WordPress as drafts, pending posts, private posts, or published posts
- Update an existing post in place when you approve an improvement in Kitful, keeping its URL, status and categories
- Set default WordPress author and categories for incoming articles
- Map SEO title and description into popular WordPress SEO plugins
- Import featured images into the WordPress Media Library
- Review recently synced Kitful posts from the WordPress settings page
This plugin:
- generates a secure secret for Kitful requests
- exposes WordPress REST endpoints used by Kitful
- lets you choose local publishing defaults like draft or publish
- maps SEO title and description into popular WordPress SEO plugins
- shows recent posts synced from Kitful
This plugin requires a Kitful account.
External services
This plugin connects to Kitful, the service that writes and improves your content. A Kitful account is required for the plugin to do anything.
When the plugin contacts Kitful.
- When an administrator clicks Connect to Kitful, the browser goes to Kitful carrying your site URL, the plugin REST base URL, and a one-time challenge. After the administrator approves, the plugin sends Kitful the site secret, the plugin and WordPress versions, and the Kitful settings below, so Kitful can reach this site.
- Once connected, the plugin checks in with Kitful through WordPress scheduled tasks, every five minutes to every hour when the site has visitors, and when an administrator opens the WordPress dashboard or saves the Kitful settings. Each check-in identifies the site with its connection id and secret, and sends the plugin and WordPress versions, the site’s admin-ajax.php address, the table-of-contents and “update posts Kitful did not create” settings, the next scheduled check-in, the last check-in error, and whether WordPress scheduled tasks are running. It receives any articles or post updates Kitful could not deliver directly, applies them exactly as a direct request would, and reports each result back (the post id, address, and status, or the error).
- When someone publishes or updates a post from the Kitful dashboard, their browser asks this site to check in right away ( admin-ajax.php?action=kitful_nudge ). That request carries no data, and the site answers it at most once every 10 seconds.
- When the plugin is deactivated, it tells Kitful so the connection shows as removed.
The plugin reports no analytics, usage telemetry, or tracking data.
When Kitful contacts your site. Kitful calls the REST endpoints this plugin registers, authenticated with the site secret. While Kitful’s own endpoint handles such a request, WordPress treats it as logged in as the account named in Default author (the first administrator when that is unset), which lets it through security plugins that block the REST API for logged-out visitors.
The plugin also adds its own kitful routes to the allow lists of All-In-One Security, Perfmatters, Disable REST API and WP Ghost for those requests. No other route or visitor is affected. Those requests can:
- Create a post from an article you published in Kitful, or update the post it created earlier if you publish that same article again. The request may include the article HTML, its title, slug and excerpt, an SEO title and description, a canonical URL, a language code, tags, and a featured image URL.
- Update an existing post that is already on your site. When you approve an improvement in Kitful, the request can replace that post’s title, body content, and SEO meta description. Whenever the title or body changes, the plugin saves the previous version as a WordPress revision first, so you can compare or restore it from the post editor. That relies on revisions being enabled for the post, which is the WordPress default but can be switched off. The post’s URL, status, author, categories, tags, featured image, publish date, and SEO title are never changed.
Updating posts Kitful did not create is off by default. Kitful may always update a post it published itself. To let it update a post you or someone else wrote, turn on Allow Kitful to update posts it did not create in Settings -> Kitful.
Every update is also checked against the WordPress capabilities of the account named in Default author. Choose a low-privileged account there and Kitful can never edit a post that account could not edit by hand. Left unset, that check runs against an administrator, so the setting above is what limits Kitful on a default install.
If an article includes a featured image URL, WordPress makes an outbound request to that image host to download the image into the local Media Library.
ai
ai/privacy
ai/terms
Privacy
ai when an administrator connects the site, when it checks in with Kitful, and when Kitful sends authenticated publish or update requests to the REST endpoints exposed by this plugin. See External services above for what each request carries.
The plugin does not send analytics, usage telemetry, or tracking data to Kitful.