Settings
Go to Settings → Windcodex Ops. The page has four tabs.
| Tab | Purpose |
|---|---|
| Connection | Connector URL, OAuth discovery links, connected apps, static client |
| Tools | Turn each tool group on or off |
| General | Connector switch, read-only mode, rate limit, undo, data cleanup |
| Activity | Undoable changes and every tool call made by connected AI platforms |
Connection
See Connecting an AI Platform.
| Option | Description |
|---|---|
| Connector URL | Paste into your AI platform as a custom connector |
| OAuth auto-registration | Let platforms register themselves. Turn off to allow only the static client |
| Static Client ID / Secret | Pre-registered client for platforms that cannot auto-register |
| Connected apps | Every authorized platform, with a Revoke button |
Tools
One toggle per tool group with its risk badge. See Tool Groups. All groups are on by default.
General
Connector
| Option | Default | Description |
|---|---|---|
| Connector status | On | Turn off to immediately stop every connected AI platform from reaching the site, without deleting configuration |
| Read-only mode | Off | Offer only tools that read data; every tool that changes something is hidden |
| Who can connect | Administrators only | Who may approve an AI connection on the consent screen: Administrators only or Editors and above. Each connection acts with the approving person's own permissions and stops working as soon as they no longer have this role |
| Max results per list call | 50 | Cap on rows returned by list tools |
| Requests per minute | 120 | Per-user cap on tool calls. Editable from 10 to 600 |
| OAuth auto-registration | On | Let platforms register themselves. Turn off to allow only the static client |
Preferences
| Option | Default | Description |
|---|---|---|
| Show activity feed | On | Records every tool call (what ran, when, success or failure) in the All calls list on the Activity tab. While off, new calls are not recorded. Undo is not affected |
| Keep undo history | On | Saves a before snapshot of every post, page, category and tag change so it can be undone. Changes made while this is off can never be undone |
| Undo window | 72 hours | How long snapshots stay undoable: 72, 96, or 168 hours |
| Require preview before high-risk actions | On | From version 1.1.1. Actions that can't be undone - permanently deleting media, recompressing an image, deleting a category or tag, removing a menu item, navigation item or widget - first return a preview and only run when the AI calls again with confirm: true. Bulk tools always preview first, whatever this is set to. See High-Risk Actions |
| Email me on high-risk actions | Off | From version 1.1.1. Emails the site admin address (Settings → General) each time a high-risk action actually runs, including confirmed bulk changes. Limited to 10 emails an hour |
| Weekly activity summary | On | From version 1.1.1. Once a week, emails the site admin address a summary of tool calls, changes and high-risk actions from the last 7 days. Skipped in weeks with no activity |
Data & Privacy
| Option | Default | Description |
|---|---|---|
| Delete all data on uninstall | Off | When on, deleting the plugin removes its settings, OAuth clients and tokens, activity log and undo history. When off, everything stays in place for a later reinstall |
The General tab also shows the Authentication method (OAuth 2.1 with PKCE) and the plugin version.
Activity
Two lists, filterable by Last 24 hours, Last 7 days, Last 30 days or All time:
- Changes - every undoable change, with an Undo button while it is inside the undo window (Undone or Expired otherwise).
- All calls - every tool call and whether it succeeded. Clear Log deletes this list.
See Undo & Activity Log.
Settings are stored in one WordPress option (wcops_settings) shared with Ops Pro, so moving between editions keeps your configuration.