Description
Kethu Site Chat Assistant adds an AI assistant to your WordPress website. Visitors can ask questions, search public site content, perform safe calculations, and more through a lightweight chat interface.
This plugin uses the WordPress AI Client (wp_ai_client_prompt()). It does not call third-party AI provider hosts directly. Provider credentials are managed in Settings Connectors.
Chat tools are registered through the WordPress Abilities API and executed only when the administrator enables them.
How it works
Visitor Chat UI WordPress REST API Agent WordPress AI Client Connected provider Abilities/tools Final response
The AI does not have unrestricted access to WordPress. It can only use explicitly registered abilities that the administrator enables.
Features
- WordPress AI Client integration (no direct provider HTTP client in plugin code)
- Provider credentials via Settings Connectors
- Tools registered as WordPress Abilities
- Admin settings under Kethu Site Chat Assistant
- Frontend shortcode:
[kethu_site_chat_assistant](legacy aliases:[ai_site_agent],[helvora_site_chat]) - Optional floating chat widget
- Lightweight Gutenberg block
- Conversation memory using transients
- Rate limiting for anonymous users
- Admin test interface with safe trace output
- Privacy notice and local usage statistics
- Graceful failure when AI is unavailable
Configuration
- Configure an AI provider under Settings Connectors
- Enable the agent in Kethu Site Chat Assistant settings
- Optionally set a preferred model name
- Customize the agent name, welcome message, and system instructions
- Enable the tools you want the assistant to use
- Configure rate limits and logging as needed
- Click Test AI Connection
Using the Chat Assistant
Use the shortcode:
[kethu_site_chat_assistant]
Or enable the floating widget in settings to show a site-wide chat button.
Available Tools (Abilities)
- Calculator — safe math without code execution
- Site Search — search public posts and pages
- Post Search — search public blog posts
- Page Search — search public pages
- Site Information — safe public site metadata
- Contact Tool — controlled contact submission with explicit confirmation
External services
Kethu Site Chat Assistant does not hard-code third-party AI endpoints. Requests are sent through the WordPress AI Client to whichever AI provider the site owner connects under Settings Connectors.
If you connect OpenAI (or another provider) through Connectors:
- User messages may be sent to that provider
- Public website content may be sent when search tools are used
- Retention and privacy are governed by that provider and by WordPress Connectors
- Review the provider’s current terms and privacy policy before enabling AI
This plugin is not affiliated with or endorsed by OpenAI or other AI providers.
Privacy
Local WordPress retention
- Conversation transcripts and conversation IDs are stored locally as WordPress transients for up to 24 hours.
- Local transients are used for session isolation, conversation continuity, optional admin traces, and privacy export/erase.
- Logging is optional and disabled by default. Optional logs stay in the WordPress database until cleared or the plugin is uninstalled.
- The plugin does not sell user data.
- The plugin does not phone home or send analytics to the plugin author.
Provider retention
- User messages may be sent to the connected AI provider through the WordPress AI Client.
- Deleting a local WordPress transient does not delete data already sent to a provider.
- Configure your site privacy policy accordingly. Site owners remain responsible for privacy, consent, and legal compliance.
Security
- Provider API keys are managed by WordPress Connectors, not stored by this plugin
- REST endpoints use nonces and permission callbacks
- Input validation, sanitization, and output escaping throughout
- No arbitrary code execution
- Retrieved website content is treated as untrusted data
- Rate limiting helps prevent abuse
Troubleshooting
- Confirm WordPress 7.0+ and that
wp_ai_client_prompt()is available - Open Settings Connectors and verify a provider is connected
- Use Test AI Connection in Kethu Site Chat Assistant settings
- Check that the agent is enabled
- Confirm your hosting allows outbound HTTPS for the connected provider
Developer Documentation
REST namespace: kethu-site-chat-assistant/v1
Endpoints:
POST /wp-json/kethu-site-chat-assistant/v1/chatPOST /wp-json/kethu-site-chat-assistant/v1/clear-conversationGET /wp-json/kethu-site-chat-assistant/v1/status
Abilities namespace: kethu-site-chat-assistant/*
Blocks
This plugin provides 1 block.
- Chat
Installation
- Upload the plugin ZIP via Plugins Add New Upload Plugin
- Activate Kethu Site Chat Assistant
- Open Settings Connectors and configure an AI provider (for example OpenAI)
- Go to Kethu Site Chat Assistant Settings
- Enable the agent and configure tools
- Add
[kethu_site_chat_assistant]to a page or enable the floating widget
FAQ
-
Does this store my OpenAI API key?
-
No. Configure providers under Settings Connectors. Kethu Site Chat Assistant uses the WordPress AI Client.
-
Can the AI access my entire WordPress admin?
-
No. It can only use the abilities/tools you enable.
-
Visitors see a friendly error message. Your site continues to function normally.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Kethu Site Chat Assistant” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Kethu Site Chat Assistant” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.2.0
- Distinctive branding: Kethu Site Chat Assistant
- WordPress.org slug / text domain:
kethu-site-chat-assistant - Code prefixes:
ksca_/KSCA_ - WordPress AI Client + Connectors + Abilities API (no direct provider HTTP client)
- Requires WordPress 7.0+, Tested up to 7.1
1.1.1
- Interim revision during review (superseded)
1.1.0
- Interim Helvora branding revision (superseded)
1.0.3
- Legacy AI Site Agent release (superseded)
1.0.2
- Plugin Check fixes and uninstall transient cleanup (legacy)
1.0.1
- Conversation/session security and privacy hardening (legacy)
1.0.0
- Initial release (legacy AI Site Agent)