Draft2Live Connect

Draft2Live Connect is the official bridge between your WordPress site and Draft2Live, an AI content generation platform that helps you research, plan, write and publish long-form SEO articles at scale.

Once the plugin is installed and your site is paired with your Draft2Live account, you can:

• Publish articles generated in Draft2Live straight to WordPress without leaving the dashboard
• Keep content in sync both ways — edits made in WordPress flow back to Draft2Live automatically
• Assign categories, tags, featured images and authors at publish time
• Schedule publications for a future date (handled by Draft2Live’s unified scheduler, so it works exactly the same for WordPress and Drupal)
• Publish multilingual content and link translations automatically if your site uses Polylang or WPML
• Write SEO meta title / meta description / focus keyword through Yoast SEO or Rank Math when one of them is active

One-click secure pairing. No copy-pasting site IDs or secrets. The plugin uses WordPress’s native Application Passwords flow — click Connect to Draft2Live in the plugin settings, approve the Application Password in the standard WordPress prompt, and the pairing completes automatically.

You stay in control. Draft2Live never receives your WordPress login password. You can revoke access at any time by deleting the Application Password under Users → Profile → Application Passwords, or by deactivating the plugin.

Open source. The plugin source is available on our website under the GPL v2 license.

External services

This plugin connects to Draft2Live — the SaaS backend that generates and manages your articles — so that your site can receive published content and keep it in sync. No data is sent until you explicitly pair the site.

Service: Draft2Live
Homepage: https://draft2live.ai
Terms of Service: https://draft2live.ai/en/terms
Privacy Policy: https://draft2live.ai/en/privacy

What is sent and when:

• During pairing (one time, user-initiated): the plugin generates a WordPress Application Password via the standard WordPress flow and sends it to Draft2Live’s /api/v1/sites/wp-callback endpoint so the SaaS can authenticate future publish requests against your site.
• When a post that originated from Draft2Live is updated, trashed, untrashed or permanently deleted: the plugin sends a signed webhook to https://<your-draft2live-instance>/api/v1/sites/webhook/{site_id} containing the post ID, the internal Draft2Live article ID, the post title, the new post status and the modification timestamp. The webhook body is signed with HMAC-SHA256 using the secret established during pairing.
• When Draft2Live publishes or updates an article on your site: Draft2Live calls the plugin’s REST endpoints (/wp-json/draft2live/v1/publish, /wp-json/draft2live/v1/posts/{id}, etc.) authenticated with the Application Password stored during pairing. Featured images and in-content images/videos referenced in the article payload are downloaded from the URL included in the payload into your WordPress media library — URLs are validated with wp_http_validate_url() before any fetch.

What is not sent:

• Visitor information, analytics or tracking data
• Your WordPress admin password (the plugin never receives it — Application Passwords are a one-way secret generated by WordPress itself)
• Anything about posts that did not originate from Draft2Live

You can stop all communication at any time by revoking the Application Password under Users → Profile → Application Passwords, or by deactivating / uninstalling the plugin.