YoDon Connector

YoDon is an article automation service: it researches a topic on the live web, writes and designs the article, and publishes it to your site on a schedule. This plugin is the WordPress side of that connection.

It is an alternative to WordPress Application Passwords, for sites where those are hidden, switched off by a security plugin, or stripped by the host. Instead of a username and password, your site gets one connection token that YoDon presents with each request.

What the plugin does

• Creates a single connection token in Settings → YoDon. Only a SHA-256 hash of it is stored; the token itself is shown once.
• Publishes as a real user of your choosing (Publish as), so every article has a proper author and the connection can never do more than that user is allowed to.
• Adds a small set of REST endpoints under autopress/v1:
  • GET /ping — connection check: publishing user, WordPress version, detected SEO plugin, upload limit and what the connection may do.
  • GET /theme — the site’s colours, fonts and content width from the active theme and Site Editor, so generated articles match your design.
  • POST /media — upload a JPEG, PNG, GIF, WebP or AVIF image into the media library.
  • POST /post — create a post (draft, pending, scheduled, private or published), or update one it already created.
  • GET / POST /categories — list categories; create one, or return the matching one if it already exists.
  • GET /posts — a compact list of recent published posts, used for internal linking.
  • POST /seo — write the SEO title, meta description and focus keyword into Yoast SEO or Rank Math.
  • POST /translations — link posts as translations of one another on sites running Polylang.
• Also accepts the token on the standard WordPress endpoints for posts, media, categories, tags and users/me. No other route on your site is affected.

Security

• Only a hash of the token is stored, and tokens are compared in constant time.
• A request without a valid token is treated exactly as it would be without the plugin installed.
• The token only works on the routes listed above, never on the rest of your site.
• The plugin never makes outbound requests and has no scheduled jobs.

How this plugin works with YoDon (third-party service)

This plugin only answers requests. It does not send anything to YoDon on its own, and it does nothing at all until a request arrives carrying the token you created. When YoDon does connect, it reads your categories, recent post titles and links, and your theme’s design tokens, and it writes the articles and images you asked it to publish. That exchange is governed by YoDon’s Terms of Service and Privacy Policy. Deleting the plugin, or regenerating the token, ends the connection immediately.