Rootz AI Discovery

When an AI agent visits your WordPress site today, it has to scrape HTML, guess your organization, and parse legal pages written for humans. Rootz AI Discovery fixes this by serving structured, machine-readable data that AI agents can understand instantly.

You get an AI Readiness Score. Activate the plugin and it grades your site out of 120 points against the published AI Discovery Standard — then tells you exactly which fixes are worth the most points, and takes you to the right screen to make them. Most sites start around a C.

The grade sits in your admin sidebar so you can see it change as you improve.

What it does:

• Serves /.well-known/ai with your organization identity, capabilities, and policies (RFC 8615)

• Structured content endpoint at /.well-known/ai/content with pages, posts, media, custom types

• Auto-generates knowledge base at /.well-known/ai/knowledge

• AI-optimized content feed at /.well-known/ai/feed

• Machine-readable policies at /.well-known/ai/policies

• Adds <link rel="ai-discovery"> tag and HTTP Link header to every page

• Generates /llms.txt from your site structure

• Provides REST API endpoints for AI agents ( /wp-json/rootz/v1/ )

• Registers WebMCP tools for browser-based AI assistants

• Machine-readable content licensing (CC-BY, CC0, All Rights Reserved, etc.)

• AI training opt-in/opt-out declaration

• Cryptographic signing — every ai.json response and llms.txt is digitally signed (ECDSA secp256k1), proving origin and content integrity

• Digital identity via plugin wallet (Ethereum-compatible address generated locally)

• Content assertion types (factual, editorial, creative-work) per item

• AI access metrics and analytics dashboard

• Self-scoring status endpoint for monitoring

Signed for origin and quality. Each plugin install generates a unique cryptographic identity. Every manifest is digitally signed so AI agents can verify the data came from your site and hasn’t been tampered with.

No other WordPress plugin does this. global/identity.

Core data is generated locally from your existing WordPress content. Optional AI-powered features use external services (see Third-Party Services below).

Open standard. 0 licensed. global/ai-discovery.

Third-Party Services

This plugin connects to external services in the following cases. All connections use HTTPS.

1. Adnet Verified Advertising (optional — disabled by default)

When you enable Adnet in Settings → AI Discovery → Adnet and configure a publisher wallet, the plugin connects to the GeistM Adnet network to serve verified advertisements:

com

* Data sent: Publisher wallet address (public blockchain address), anonymized event counts, cryptographic batch hashes. No name, email, or IP address is transmitted.

* Browser data: A cryptographic key pair unique to this browser+domain is generated locally and stored in IndexedDB. The private key never leaves the visitor’s device. This key cannot be used to track visitors across other sites.

* When: Only when Adnet is enabled AND a publisher wallet address is configured

com/terms

com/privacy

2. Polygon Blockchain RPC (optional — when Adnet is enabled)

When Adnet is enabled, the plugin verifies campaign contract status via a public Polygon RPC node:

com

* Data sent: Campaign contract address (public on-chain data only). No user data.

* When: Same condition as Adnet above

3. Rootz AI Proxy (optional)

When you use the “Auto-Populate with AI” feature to generate your site description, summary, or core concepts, the plugin sends your site URL and basic metadata to:

host/agent/rootz/ai-proxy/

* Data sent: Site URL, title, tagline

* When: Only when you click “Auto-Populate” in the admin panel

global/privacy

2. Anthropic API (optional)

If you enter your own Anthropic API key in settings, the plugin can call the Anthropic API directly as a fallback for AI content generation:

com

* Data sent: Site URL, title, tagline (same as above)

* When: Only when you click “Auto-Populate” and have entered an API key

com/legal/privacy

3. Plugin Updates (automatic)

The plugin checks for available updates from the Rootz update server:

json

* Data sent: None (read-only GET request)

* When: Automatically every 12 hours (uses WordPress transients)

org provides updates instead)

global/privacy

4. License Verification (automatic when configured)

If you enter an Owner Identity in the Account tab, the plugin verifies your subscription status:

global/api/license/status

* Data sent: Your Owner Identity address (a public blockchain address, not personal data)

* When: On admin page load, cached for 12 hours

global/privacy

Privacy

Data Storage

All structured data (organization identity, policies, content) is generated from your existing WordPress content and stored in wp_options. No user data is collected.

External Services

The plugin connects to external services only when specific features are used. See the “Third-Party Services” section in the Description tab for complete details including what data is sent, when, and links to each service’s privacy policy.

Cookies

This plugin does not set any cookies.

Analytics

well-known/ai endpoints in a local database table (wp_rootz_metrics). This data stays on your server and is never transmitted externally. You can view it in the Analytics tab.