About this plugin
ZoofiAI provides a capability-checked WordPress connector for the Zoofi SaaS/MCP platform. org including Durable Jobs, Pro Operations Suite, local-admin white-label recovery, Connection Doctor, encrypted integration-secret storage, emergency read-only mode, capability reporting, audit export and controlled uninstall behavior.
It includes the Autonomous Site Agent suite with 25 smart integrations: visual QA, master smart execution, SEO/internal-link/image intelligence, temporary media lifecycle, recovery/conflict detection, persistent site memory, semantic candidate search, queue/scheduling/bulk workflows, staging/backup/database/performance/security intelligence, Cloudflare, WooCommerce, forms/email, GA4/Search Console, source verification, audit replay planning and AI-to-AI handover.
The connector includes content/media/SEO operations, safe WP-CLI emulation, approval previews, audit logs, backup/rollback, theme and plugin source-file operations, navigation menu management, native MCP file upload and optional Rank Math metadata.
The plugin does not expose an arbitrary shell. WordPress capabilities and host security controls remain the final authorization boundary.
External services
This plugin connects to external services only for features that require them.
ZoofiAI
ZoofiAI is the primary service used to pair a WordPress site with an authorized AI client, broker authenticated management requests, and maintain the user’s Zoofi workspace. Connection is initiated by the administrator or by an AI flow that still requires WordPress administrator authorization.
Data sent can include the site URL/name, connector installation identifier, connector version, pairing information, and the WordPress data required for a user-requested management operation. A connector secret is used to authenticate signed requests. WordPress login passwords are not sent to ZoofiAI by this connector.
com/
com/privacy
com/terms
com/mcp
No optional integration is contacted until it is configured and a related operation is requested.
Privacy
The plugin stores local connector identity, pairing state, permissions, encrypted optional integration credentials, audit records and operational state needed for its features. ZoofiAI communication occurs only as described in the External services section.
If your site has its own privacy policy, disclose your use of ZoofiAI together with the types of site data you choose to process through them.
Security
Use HTTPS. Cloud requests are signed with a per-install connector secret, timestamp and nonce. High-impact operations use approval/preview gates and audit logging.
Theme/plugin source paths are sandboxed. DISALLOW_FILE_MODS remains a hard boundary. For authenticated Zoofi Full Administrator grants, DISALLOW_FILE_EDIT no longer blocks Zoofi’s signed, rollback-backed source editor because it is separate from the built-in WordPress editor UI.
White Label
When the site is connected, administrators can enable White Label from ZoofiAI menu. White Label hides Zoofi from the Tools menu, settings/status page and installed Plugins list while keeping signed AI/REST access active. Authorized AI clients can use dedicated White Label status/enable/disable operations.
page=zoofi&zoofi_recovery=1 to open the nonce-protected local recovery screen and reveal Zoofi without disconnecting the service. The inactivity auto-reappear window can be set to 7, 15, 30 or 60 days, or Never. The emergency fallback remains wp option delete zoofi_hide_from_admins.
WordPress automatic updates are opted in while hidden whenever an update package is available.
Private Distribution
This is the ZoofiAI Pro private edition distributed from the Zoofi Download Center. It includes signed private updates, Stable/Beta release channels, Connection Doctor, emergency read-only controls, encrypted integration-secret storage, capability reporting, audit export and controlled uninstall behavior.
com/download