Sentrixa Social

Automatically shares new WordPress posts to your social media accounts, with no trial period and no paywall on the included features.

What it does

When a post is published for the first time, it is shared to the networks
you have connected:

• Mastodon — paste one access token, works immediately.
• Bluesky — paste a handle + app password, works immediately.
• X (Twitter) — paste the four OAuth 1.0a keys from the X developer
  portal, works immediately. No broker.
• Facebook Page — one click “Connect” through the Sentrixa relay. No
  Facebook developer app on this site.
• Instagram (professional account linked to a Facebook Page) — via the
  relay. Needs a featured image; the caption carries no clickable link.
• Threads — via the relay (its own Meta OAuth).
• LinkedIn (profile or organisation Page) — same, via the relay.

Each post has a “Share to social” box: pick the networks, edit the message
just for that post, hold it back, or push it out again by hand.

How the message is built

A template with tokens, set site-wide and overridable per network and per
post:

{title} {excerpt} {link} {hashtags} {tags} {author} {sitename} {date} {categories}

The featured image is attached where the network supports it. On Facebook and
LinkedIn the link becomes a preview card, so {link} is removed from their
text automatically. Text is trimmed to each network’s length limit by
shortening {excerpt} only — the link is always kept whole.

Setup

1. Settings → Sentrixa Social.
2. Under each network, tick “Enable”, add its credentials (or click Connect),
   then “Test connection”.
3. Tick “On by default for new posts” for the networks that should be
   pre-selected on the editor.
4. Choose which post types and (optionally) categories are shared.

Mastodon token: on your instance, Preferences → Development → New
application, scopes write:statuses and write:media, then copy
“Your access token”.

Bluesky app password: Settings → Privacy and security → App passwords →
Add App Password. Use that, not your account password.

Facebook / LinkedIn: click Connect and authorise. The Sentrixa relay
(social-relay.sentrixa.co.uk) holds the reviewed platform apps and the OAuth
tokens; this site only ever stores an opaque connection id, and never sees a
Facebook or LinkedIn token.

Sending

Publishing does not wait on the social APIs — shares are queued and sent by
WP-Cron within about a minute. If the site has WP-Cron disabled, use
Settings → Social Activity → “Send pending now”, or wire the queue hook
sxsoc_work_queue into real cron. Failed sends retry with backoff (1m, 5m,
20m, 1h, 3h) up to six attempts; everything is on the Activity screen.

Security

• Mastodon / Bluesky tokens are encrypted at rest (libsodium, key derived
  from the site’s auth salts).
• Facebook / LinkedIn tokens never touch this site — they live on the relay.
  Requests to the relay are HMAC-signed with a per-site secret, so a leaked
  connection id alone cannot post.
• Only users with manage_options can change settings or connect accounts.

Filters

• sxsoc_relay_url — override the relay base URL (staging).
• sxsoc_network_drivers — add or remove network drivers.
• sxsoc_rendered_message — final say over the outgoing text.

External services

Sentrixa Social sends your posts only to the networks YOU connect. Nothing is sent until you add an account and enable the network:

• Mastodon: the instance address you enter (for example https://mastodon.social). Sent: the post text, link and optionally the image. Terms and privacy are those of your instance.
• Bluesky: bsky.social (or the server you enter). Sent: the post text, link and optionally the image. https://bsky.social/about/support/tos and https://bsky.social/about/support/privacy-policy
• X (Twitter): api.x.com, using the API keys you create. Sent: the post text and link. https://x.com/en/tos and https://x.com/en/privacy