VideoWhisper Site Manager

VideoWhisper Site Manager helps you manage WordPress posts and pages through ChatGPT (Custom GPT + Actions) using your account (and subscription), without embedding an AI service inside WordPress.

It provides:

• A secure REST layer for content operations
• A generated OpenAPI schema URL for GPT Actions import
• A guided onboarding flow with copy/paste values for ChatGPT Builder
• One-click creation of a WordPress Application Password (shown once, not stored)
• Safety controls such as HTTPS enforcement, draft-first behavior, and publish gating

The plugin does not call OpenAI (or any AI provider) directly. Your WordPress site exposes authenticated endpoints and setup guidance. You connect it to ChatGPT yourself with own account and subscription (optional).

Ideal for

• Site owners who want to draft/edit WordPress content by chat
• Teams using a dedicated WordPress user (recommended: Editor) for AI-assisted publishing workflows
• Mobile workflows after desktop setup (configure once, then use the GPT on phone/tablet)

Direct Mode (current version)

1. Install and activate VideoWhisper Site Manager.
2. Open VideoWhisper Site Manager > Onboarding.
3. Create (or link) a dedicated WordPress user (recommended role: Editor).
4. Create an Application Password from the onboarding page (one click).
5. In ChatGPT Builder (desktop), create a Custom GPT and import the plugin OpenAPI schema URL.
6. Use the provided copy/paste values for Configure and Actions.
7. Test on desktop, then use the same GPT on mobile.

Features

• ChatGPT / GPT Actions integration via generated OpenAPI schema URL (/wp-json/videowhisper-site-manager/v1/openapi)
• GPT Actions onboarding aligned with current auth UI (Authentication Type: API Key, Auth Type: Basic)
• One-click Application Password creation for the dedicated operator user (plaintext shown once, not stored)
• Guided onboarding with copyable values for:
  • GPT Name, Description, Instructions, Conversation Starters
  • Action authentication values
  • Schema URL and Privacy Policy URL
  • curl examples and credential samples
• REST endpoints for listing, reading, creating, and updating WordPress posts/pages
• dry_run support for safer create/update previews before writing
• Draft-first workflow and optional publish permission (Allow publish)
• HTTPS enforcement for plugin endpoints by default (with dev-only HTTP override setting)
• Categories and tags support
• Generic SEO metadata fields (plugin-owned keys)
• Audit logging endpoint for administrators
• Settings endpoint for administrators
• Admin notices and onboarding reminders for incomplete setup
• Recommended GPT capabilities guidance (Web Search / Code Interpreter, etc.)

ChatGPT Setup (Quick Notes)

• Use a Custom GPT on desktop for initial setup.
• In Actions, import the schema from the plugin’s OpenAPI URL (do not paste the whole schema manually).
• For authentication, the onboarding guide provides the values for current GPT Actions UI:
  • Authentication Type = API Key
  • Auth Type = Basic
• For GPT sharing/visibility, choose Only Me (recommended). Do not use Link unless you fully understand the risk.

Privacy

This plugin stores the following data on your WordPress site:

• Plugin settings in WordPress options (for example: publish/rate limit/HTTPS behavior settings)
• Audit log entries in a custom database table (*_vwsm_audit_logs)
• Optional dedicated operator user ID reference in WordPress options (when using onboarding helper)
• Short-lived transient for one-time Application Password display after creation (plaintext is not stored long-term)

Audit logs may include:

• Authenticated WordPress user ID
• Request route and method
• Sanitized request/response summaries
• Timestamp and IP address

This plugin does not send data to third-party AI services by itself.
This plugin does not include telemetry/analytics tracking by default.

Site owners are responsible for:

• Securing the site with HTTPS
• Managing WordPress users and Application Passwords
• Configuring GPT sharing safely (recommended: Only Me)
• Reviewing the privacy implications of any external AI service connected to the site’s API