Massic Integration

Massic Integration links your WordPress site to Massic so authorized users can publish, preview, update, and unpublish WordPress posts/pages from Massic with signed requests.

This plugin requires an active Massic account and a connection to Massic services. After an administrator connects the plugin, Massic can send authorized publishing requests to this WordPress site.

Key features:

• One-click connect flow from WP Admin with secure pairing.
• Signed REST endpoints for publish/update, unpublish, preview link creation, slug checks, and theme checks.
• Draft and publish support for posts and pages.
• Structured SEO head payload storage and rendering on singular content.
• Best-effort lifecycle sync on plugin deactivate/uninstall.

Security model:

• Requests are verified with HMAC signatures, nonce, and timestamp checks.
• Site-scoped identifiers and secrets are required for privileged operations.
• Content writes are constrained to post and page post types.

External services

This plugin connects to external Massic services to complete pairing and content publishing workflows.

1. Massic Backend API (MASSIC_BACKEND_BASE, default https://agency.massic.io)

* What it is used for: one-click pairing, connection approval, signed connector requests, publishing operations, lifecycle sync, and connector support.
* What data is sent from WordPress to Massic: site URL, site ID, site name, connection state, signed request metadata, plugin lifecycle events, theme/style information, logo or site icon URLs, sample post/page URLs, template availability, connector status details, WordPress post/page IDs, slugs, permalinks, and publishing status.
* What data is sent from Massic to WordPress: content titles, slugs, statuses, HTML content, excerpts, publish dates, SEO/head metadata, featured image URLs and metadata, preview requests, slug availability checks, page template checks, unpublish requests, and disconnect requests.
* When data is sent: when an administrator starts or approves connection, when Massic publishes/previews/updates/unpublishes content, when Massic checks theme or slug state, and during best-effort deactivate/uninstall lifecycle sync.

1. Massic App (MASSIC_APP_BASE, default https://app.massic.io)

* What it is used for: Massic account login and the one-click approval flow initiated from WP Admin.
* What data is sent: site URL, site ID, state token, finalize token, return URL, and connect-session identifiers needed for approval.
* When data is sent: when an admin starts the recommended connect flow.

Publisher links:
* Terms: https://massic.io/terms
* Privacy policy: https://massic.io/privacy