Title: Chapote Bot Manager Author: naltpom Published: July 2, 2026 Last modified: July 2, 2026 --- Search plugins ![](https://ps.w.org/chapote-bot-manager/assets/banner-772x250.png?rev=3594088) ![](https://ps.w.org/chapote-bot-manager/assets/icon-256x256.png?rev=3594088) # Chapote Bot Manager By [naltpom](https://profiles.wordpress.org/naltpom/) [Download](https://downloads.wordpress.org/plugin/chapote-bot-manager.2.2.0.zip) * [Details](https://wordpress.org/plugins/chapote-bot-manager/#description) * [Reviews](https://wordpress.org/plugins/chapote-bot-manager/#reviews) * [Installation](https://wordpress.org/plugins/chapote-bot-manager/#installation) * [Development](https://wordpress.org/plugins/chapote-bot-manager/#developers) [Support](https://wordpress.org/support/plugin/chapote-bot-manager/) ## Description Chapote Bot Manager turns your WordPress admin into a lightweight dashboard for your Chapote account. From the “Chapote” menu in wp-admin you can: * Sign in with Chapote (“Sign in with Chapote”, OAuth Authorization Code + PKCE— you are redirected to the Chapote consent screen; no Chapote password is entered or stored in WordPress). * Manage your bots: list, create, and edit the appearance with a live preview. * Pay and subscribe through hosted Stripe Checkout (redirect), then manage the plan or cancel. * Enable the widget per bot and target the pages where it appears (handled entirely in WordPress, in local options). * Improve SEO with server-rendered output the JavaScript widget cannot provide: an optional “Powered by Chapote” link and a schema.org FAQ (FAQPage, JSON-LD) eligible for rich results. #### External service (required) **This plugin requires a Chapote account, a paid third-party service hosted at https:// chapote.fr.** Without an active Chapote account the plugin cannot work: it is a thin interface over the Chapote account API and performs no chatbot processing locally. **Communication with Chapote.** The plugin communicates with chapote.fr (address configurable in the settings) to: * sign in: an OAuth exchange (Authorization Code + PKCE, S256) opens the Chapote consent screen in your browser, then WordPress exchanges the authorization code for an access token, server to server; * manage your bots: read the list of your bots, create a bot, update its appearance, open a Stripe Checkout session, and read the billing catalog. **Data sent to Chapote.** * On sign-in: the OAuth authorization (no Chapote credentials are entered in WordPress); the email and name of the connected account are then read, only to be displayed in the interface. * When managing a bot: its configuration (name, appearance, subscription) and your site URL. * On the public side: on pages where you enable the widget, the **visitor’s** browser loads the `/widget.js` script from the configured Chapote domain and sends Chapote the conversation messages and associated technical data (e.g. IP address, user agent) in order to receive the chatbot’s answers. **Data that never leaves WordPress.** The widget activation state and page targeting are stored locally in WordPress and are never sent to Chapote. Terms of service: https://chapote.fr/legal/cgu — Privacy policy: https://chapote. fr/legal/confidentialite ## Screenshots [⌊Guided setup: a step-by-step assistant builds your chatbot, from connecting your account to going live.⌉⌊Guided setup: a step-by-step assistant builds your chatbot, from connecting your account to going live.⌉[ Guided setup: a step-by-step assistant builds your chatbot, from connecting your account to going live. [⌊Your WordPress site is analyzed: pick the published pages that describe your business( page discovery stays 100% in WordPress).⌉⌊Your WordPress site is analyzed: pick the published pages that describe your business (page discovery stays 100% in WordPress) .⌉[ Your WordPress site is analyzed: pick the published pages that describe your business( page discovery stays 100% in WordPress). [⌊The conversation tree generated by AI from your pages, ready to review and edit.⌉⌊ The conversation tree generated by AI from your pages, ready to review and edit.⌉[ The conversation tree generated by AI from your pages, ready to review and edit. [⌊A recommended plan based on your tree and answers: modules and AI tier, with a clear monthly estimate.⌉⌊A recommended plan based on your tree and answers: modules and AI tier, with a clear monthly estimate.⌉[ A recommended plan based on your tree and answers: modules and AI tier, with a clear monthly estimate. [⌊"My bots": manage your bots and toggle the widget "On the site" per bot.⌉⌊"My bots": manage your bots and toggle the widget "On the site" per bot.⌉[ “My bots”: manage your bots and toggle the widget “On the site” per bot. ## Installation 1. Upload the plugin to `wp-content/plugins/` and activate it, or install it from the ZIP via Plugins > Add New > Upload Plugin. 2. Open the “Chapote” menu in the WordPress admin. 3. Click “Sign in with Chapote” and approve access on the Chapote consent screen. 4. Manage your bots, then enable the widget on the pages of your choice. Requires an active Chapote account (https://chapote.fr), PHP 7.4+ with the OpenSSL extension (used to encrypt the access token at rest). ## FAQ ### Do I need a Chapote account? Yes. This plugin is an interface over the Chapote service (chapote.fr) and requires an active account. All chatbot processing happens on Chapote, not in WordPress. ### Is my access token exposed to the browser? No. The token is stored encrypted (AES-256-GCM) on the server and is never sent to the page JavaScript. The browser talks to a WordPress REST proxy (protected by` manage_options` capability and a nonce), which relays calls to Chapote. ### Where does the widget load from? On the pages where you enable it, the visitor’s browser loads the official widget script (`widget.js`) from your configured Chapote domain. ### Does activating a bot on my site require a paid plan? No, the widget serves any usable bot; a free bot works with the free reply quota. Billing and modules are managed on Chapote. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Chapote Bot Manager” is open source software. The following people have contributed to this plugin. Contributors * [ naltpom ](https://profiles.wordpress.org/naltpom/) [Translate “Chapote Bot Manager” into your language.](https://translate.wordpress.org/projects/wp-plugins/chapote-bot-manager) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/chapote-bot-manager/), check out the [SVN repository](https://plugins.svn.wordpress.org/chapote-bot-manager/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/chapote-bot-manager/) by [RSS](https://plugins.trac.wordpress.org/log/chapote-bot-manager/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2.2.0 * Guided onboarding wizard: from the “Chapote” menu, a step-by-step flow connects your account (OAuth popup), reads your published pages, generates a chatbot from your site with AI, lets you customise its appearance, edit the conversation tree, preview the widget, pick a recommended plan, and go live — in one place. * Page discovery is 100% WordPress (published pages/posts/CPT, relevance-ranked), with a 15-URL cap; URLs are restricted to your own domain before being sent to Chapote. * Shared front-end primitives extracted to `cbo-core.js` (reused by the back-office and the wizard); no behavioural change to the existing back-office. * “Sign in with Chapote” now opens in a popup (with full-page redirect fallback when popups are blocked). #### 2.1.0 * SEO: new “SEO” tab. Optional “Powered by Chapote” link (off by default) and schema. org FAQ structured data (FAQPage, JSON-LD) rendered server-side, eligible for rich results. #### 2.0.0 * Full management interface in WordPress, a thin interface over the Chapote account API. * “Sign in with Chapote” via OAuth Authorization Code + PKCE (S256); token encrypted server-side (AES-256-GCM), never exposed to the browser. * Bot management: list, create, edit appearance with a live preview. * Payment and subscription via hosted Stripe Checkout (redirect), with consent to immediate execution; plan change and cancellation. * Per-bot widget activation and page targeting (entirely in WordPress, local options). * REST proxy (namespace `chapote-bo/v1`) protected by `manage_options` + nonce; external services disclosure and GDPR privacy content; full cleanup on uninstall. ## Meta * Version **2.2.0** * Last updated **18 hours ago** * Active installations **Fewer than 10** * WordPress version ** 5.8 or higher ** * Tested up to **7.0** * PHP version ** 7.4 or higher ** * Tags * [AI](https://wordpress.org/plugins/tags/ai/)[assistant](https://wordpress.org/plugins/tags/assistant/) [chat](https://wordpress.org/plugins/tags/chat/)[chatbot](https://wordpress.org/plugins/tags/chatbot/) [support](https://wordpress.org/plugins/tags/support/) * [Advanced View](https://wordpress.org/plugins/chapote-bot-manager/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/chapote-bot-manager/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/chapote-bot-manager/reviews/) ## Contributors * [ naltpom ](https://profiles.wordpress.org/naltpom/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/chapote-bot-manager/)