| 开发者 | uglyrobot |
|---|---|
| 更新时间 | 2026年8月7日 23:54 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
priv_user_id metadata. Guest requests do not include a user ID. DocsBot keeps priv_* metadata out of chat history and AI model context while making it available to authorized integrations.
WordPress keeps the DocsBot API key on the server and uses private-bot signature keys only to create short-lived tokens. The plugin encrypts both credentials before database storage. Site owners may instead supply them through wp-config.php constants.
External service
This plugin connects to DocsBot, a third-party service:
https://docsbot.ai/api when an administrator connects an account, reads the authenticated user's current team, lists teams or bots, reads settings, or saves supported bot settings.https://widget.docsbot.ai/chat.js after an administrator enables the widget./wp-content/plugins/ or install the ZIP from Plugins > Add New Plugin > Upload Plugin.No. WordPress makes admin API requests on the server. The plugin encrypts the key before database storage and never includes it in frontend HTML or JavaScript.
WordPress checks your access rules before creating a short-lived, server-signed access token. The signing key stays on your server, and the token response is private and never cached.
Public identity sharing is enabled by default for new plugin setups. You can independently turn off sharing a visitor's display name, email address, or raw WordPress user ID. For private bots, signed requests automatically include the logged-in visitor's numeric WordPress user ID as private metadata. Guest requests include no user ID.
The widget stays hidden until the selected membership integration is available again or you change the restriction.
Yes. Add one literal path prefix per line, such as /docs/ or /account/. Excluded paths always take precedence.
Page-path rules decide where the widget appears; they do not protect access by themselves. To protect chat, also require a login, WordPress role, or membership under Audience. WordPress checks those rules before sharing identity data or issuing a private-bot token.
DocsBot does not expose a public create-permission flag. When a selected team has no bots, the plugin links to the DocsBot bot page. DocsBot then applies your current role and plan.