About this plugin
Kommentti connects your WordPress publication to the Kommentti comment and community service.
- Standard iframe installation on every Kommentti plan.
- On-site moderation from Comments → Kommentti on Starter and higher plans, with a personal encrypted server credential for each editor.
- Optional server-rendered comment lists with the Publisher and Media Network service plans.
- Sign-in, registration, replies and reports inside the article’s AJAX widget.
- Automatic placement for classic and block theme comment areas.
- A Kommentti comments block and the [kommentti_comments] shortcode.
- Meta-tag domain verification assistance.
- Read-only API credentials kept on the server, encrypted using WordPress salts.
- Short-lived comment caching, signed webhook invalidation and page-cache purge hooks.
- Existing WordPress comments remain in the WordPress database.
- English, Turkish, German, French, Finnish and Spanish interface translations.
Test your theme and full-page/CDN cache before deploying to a busy publication. The plugin does not promise search indexing, ranking or citation in AI answers.
External service
A Kommentti account and a verified public HTTPS website are required. Free service includes one website and 500 new comments per month. The plugin is free; paid service features and limits are enforced by Kommentti.
com only after the administrator configures and permits the service connection. Connection checks send the site ID, site origin and language. Server display sends the site ID, discussion ID, language, page and a private read-only credential in the Authorization header.
The credential is never placed in a browser URL or public HTML.
On-site moderation is an optional administrator/editor workflow. Each WordPress user with moderate_comments permission saves their own personal Kommentti moderation key. It is stored encrypted per user and site.
An authenticated, nonce-protected WordPress request sends a short-lived challenge, the configured site origin and this key to the Kommentti grant service. A dedicated iframe receives a one-use grant and displays pending comments only after Kommentti verifies site ownership or assigned moderator rights and the eligible service plan. Keys are not exposed to the browser.
Removing a local saved key does not revoke it remotely; revoke it in Kommentti when no longer needed.
The public comment widget loads the documented Kommentti service script and iframe. Visitors connect directly to Kommentti, which receives connection information such as IP address and browser information, and processes account details and submitted comments. Published comments expose the author’s display name, text and dates.
This plugin does not send analytics or telemetry.
Signed notifications from Kommentti are received at the WordPress REST URL shown in Settings → Kommentti. These contain event metadata and site/discussion identifiers, not private account details or comment bodies.
com
com/terms
com/privacy
com/developers
com