Title: CloakPilot
Author: cloakpilot
Published: <strong>November 6, 2026</strong>
Last modified: November 6, 2026

---

Search plugins

![](https://ps.w.org/cloakpilot/assets/banner-772x250.png?rev=3788229)

![](https://ps.w.org/cloakpilot/assets/icon-256x256.png?rev=3788229)

# CloakPilot

 By [cloakpilot](https://profiles.wordpress.org/cloakpilot/)

[Download](https://downloads.wordpress.org/plugin/cloakpilot.1.0.4.zip)

 * [Details](https://wordpress.org/plugins/cloakpilot/#description)
 * [Reviews](https://wordpress.org/plugins/cloakpilot/#reviews)
 *  [Installation](https://wordpress.org/plugins/cloakpilot/#installation)
 * [Development](https://wordpress.org/plugins/cloakpilot/#developers)

 [Support](https://wordpress.org/support/plugin/cloakpilot/)

## Description

CloakPilot is an affiliate control platform that runs inside WordPress. Every affiliate
link on your site gets a short, readable address such as `example.com/go/your-tool`.
When a destination changes, you edit it once in CloakPilot and every post that uses
the link follows. Clicks are counted on your own server, so the numbers stay in 
your WordPress database.

It is built for content sites, review blogs and agencies that earn from other companies’
affiliate programmes and want their links organised, measurable and easy to automate.

#### What CloakPilot does

 * **Short /go/ links.** Every affiliate destination gets a clean address under 
   a prefix you choose (default `go`). Redirects are answered from a cached map,
   with 301, 302 or 307 and `rel="sponsored nofollow"` per link.
 * **Click tracking.** Clicks are recorded with bot filtering, the source post, 
   the visitor’s country (from your host’s or CDN’s country header) and device type.
   No third-party tracking service is involved.
 * **Auto-linking.** Give a link one or more keywords and CloakPilot turns the first
   mention in a post into the tracked link. It skips headings, existing links, images,
   quotes and code, and respects a per-post limit.
 * **Vendors and categories.** Group links by the company that pays you and by your
   own categories, with notes and the vendor’s dashboard address one click away.
 * **Where each link appears.** CloakPilot scans your published content and shows,
   for every link, the pages that contain it.
 * **Reports.** Clicks by day, by link, by source post, by vendor, by country and
   by device, for any date range, plus a dashboard widget.
 * **Import.** Bring your links in from ThirstyAffiliates or from a CSV file, with
   a dry run before anything is written. A CSV template is included.
 * **GA4 events (optional).** Send a server-side `affiliate_click` event to your
   own Google Analytics 4 property when you enter its Measurement ID and API secret.
 * **REST API.** Links, categories, vendors, click statistics and settings are available
   under `cloakpilot/v1`, authenticated with standard WordPress Application Passwords.
 * **Translation-ready, right-to-left included.** The interface is built for Hebrew
   and Arabic as well as left-to-right languages, and its own language setting can
   differ from the site’s. Translations are delivered through translate.wordpress.
   org.

Everything listed above is part of this free version, with no account and no time
limit.

#### Full version

The full version of CloakPilot is a separate download from https://cloakpilot.net/
download, and downloading it is free. Registering it for free (with an email address
or an activation code) gives you one AI agent, which works with your links through
a built-in MCP server with its own key, permissions and activity log. A 14-day free
trial or a paid plan adds unlimited AI agents, products that route one address to
different vendors by country or as a split test, a deals module with an editor block,
scheduled link health checks, revenue tracking with earnings per click, network 
connections, a “money on the table” report and four editor blocks. None of that 
code is included in this plugin; starting a trial or buying a plan downloads the
full version from the licensing service, Freemius.

### External services

CloakPilot works without any external service. It can connect to the following services,
each only in the situation described.

**Freemius (licensing and the optional usage opt-in).** CloakPilot uses the Freemius
SDK to offer the optional opt-in, the free trial and paid plans. On first activation
Freemius shows its own screen asking whether you agree to share basic information.
Only if you click “Allow & Continue”, the details listed on that screen are sent
to Freemius (api.freemius.com): your name and email address, the site address and
title, the WordPress, PHP and plugin versions, the site language and, where the 
screen lists it, the names and versions of your plugins and themes. Freemius uses
them to manage your account, send license and security notices and, if you start
a trial or buy a plan, deliver the paid version. You can opt out later from the 
Plugins screen. If you skip, nothing is sent and every feature of this plugin keeps
working. Terms: https://freemius.com/terms/ – Privacy policy: https://freemius.com/
privacy/

**cloakpilot.net (only when you send feedback).** The “Send feedback” button on 
CloakPilot screens opens a form. Nothing is sent until you click Send. Then your
server sends the type of feedback, your message and the reply email if you enter
one to https://cloakpilot.net/api/feedback, so we can read and answer it. Your site
address, the CloakPilot, WordPress and PHP versions, the current CloakPilot screen
and the interface and site languages are added only if you tick “Also send these
technical details” in the form; the box is off by default and the form lists exactly
what it adds. No link, click or license data is ever sent. Terms: https://cloakpilot.
net/legal-terms – Privacy policy: https://cloakpilot.net/legal-privacy

**Google Analytics 4 (only if you turn it on).** If you enter a GA4 Measurement 
ID and API secret under Settings > GA4, each click on a short link (bots excluded)
sends an `affiliate_click` event from your server to Google’s Measurement Protocol
at https://www.google-analytics.com/mp/collect. The event carries the link’s slug
and ID, a click identifier, the visitor’s country code (from your host’s country
header), the referring page and a client identifier that is a one-way checksum of
the visitor’s IP address and browser string; the IP address itself is not sent. 
The “Test connection” button sends one test event to Google’s validation endpoint.
Terms: https://marketingplatform.google.com/about/analytics/terms/us/ – Privacy 
policy: https://policies.google.com/privacy

Nothing else leaves your site: CloakPilot makes no request of its own when it is
activated or when you open its screens. The font used for the product name in the
admin header (Bricolage Grotesque, SIL Open Font License 1.1) is bundled with the
plugin and loaded from your own site.

## Screenshots

[⌊The Links screen: every affiliate link with its /go/ address, destination, vendor,
category, clicks and the pages it appears on, with search, filters and bulk actions.⌉⌊
The Links screen: every affiliate link with its /go/ address, destination, vendor,
category, clicks and the pages it appears on, with search, filters and bulk actions
.⌉[

The Links screen: every affiliate link with its /go/ address, destination, vendor,
category, clicks and the pages it appears on, with search, filters and bulk actions.

[⌊Editing a link: its /go/ address and destination, redirect type, sponsored/nofollow,
auto-link keywords, the pages that contain it and its 30-day click trend.⌉⌊Editing
a link: its /go/ address and destination, redirect type, sponsored/nofollow, auto-
link keywords, the pages that contain it and its 30-day click trend.⌉[

Editing a link: its /go/ address and destination, redirect type, sponsored/nofollow,
auto-link keywords, the pages that contain it and its 30-day click trend.

[⌊Reports: clicks over any date range, by country, device and vendor, with views
by day, by link and by source post.⌉⌊Reports: clicks over any date range, by country,
device and vendor, with views by day, by link and by source post.⌉[

Reports: clicks over any date range, by country, device and vendor, with views by
day, by link and by source post.

[⌊Vendors: links are grouped automatically by the company that pays you, with each
vendor's clicks and links.⌉⌊Vendors: links are grouped automatically by the company
that pays you, with each vendor's clicks and links.⌉[

Vendors: links are grouped automatically by the company that pays you, with each
vendor’s clicks and links.

[⌊Import: switch from another link plugin without touching your posts (the old addresses
keep working), or bring links in from a CSV file with a preview first.⌉⌊Import: 
switch from another link plugin without touching your posts (the old addresses keep
working), or bring links in from a CSV file with a preview first.⌉[

Import: switch from another link plugin without touching your posts (the old addresses
keep working), or bring links in from a CSV file with a preview first.

## Installation

 1. In your WordPress admin go to Plugins > Add New, search for “CloakPilot”, then 
    click Install and Activate. Or upload the plugin zip through Plugins > Add New 
    > Upload Plugin.
 2. Open CloakPilot in the admin menu. A short setup wizard confirms your link prefix
    and offers to import existing links.
 3. If you are moving from another link plugin, run the importer as a dry run first
    and compare a few destinations before you deactivate the old plugin.
 4. If your site uses a page cache, clear it once after activation so the new short
    links are picked up.

## FAQ

### Can I change the /go/ prefix?

Yes, under CloakPilot > Settings > Redirects. CloakPilot updates the prefix in your
published posts and pages and keeps the previous prefix redirecting, so links that
are already out in newsletters or on other sites keep working.

### Does CloakPilot slow down my site?

Redirects are resolved from a single cached map, without querying each link on every
click. Click recording is one database insert. Auto-linking caches its keyword list
and runs only on singular posts.

### Where is my data stored?

In your own WordPress database. Links, clicks, categories and vendors never leave
your site unless you connect a script to the REST API yourself. See “External services”
below for the few connections the plugin can make.

### Does it work with the block editor?

Yes. The short links are ordinary links, so they work in any block, in the classic
editor, in page builders and in menus. The `[cloakpilot_cta slug="your-link" text
="Buy now"]` shortcode prints a tracked link anywhere shortcodes run.

### Can AI apps work with my links?

AI agents and the MCP server are part of the full version of CloakPilot, which is
free to download from https://cloakpilot.net/download. Registering the full version
for free (with an email address or an activation code) gives you one AI agent. This
plugin contains no AI-agent code; its Settings > AI agents tab explains where to
get them.

### What happens to my data if I uninstall the plugin?

By default your links, clicks and settings stay in the database, so reinstalling
brings everything back. A setting under Settings > Privacy removes all CloakPilot
data when the plugin is deleted.

### What is the difference between this plugin and the paid version?

This plugin is complete on its own for managing and tracking links. The full version
is a different download that adds the features listed under “Full version”. You 
can switch at any time; your links and clicks stay as they are.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“CloakPilot” is open source software. The following people have contributed to this
plugin.

Contributors

 *   [ cloakpilot ](https://profiles.wordpress.org/cloakpilot/)

[Translate “CloakPilot” into your language.](https://translate.wordpress.org/projects/wp-plugins/cloakpilot)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/cloakpilot/), check
out the [SVN repository](https://plugins.svn.wordpress.org/cloakpilot/), or subscribe
to the [development log](https://plugins.trac.wordpress.org/log/cloakpilot/) by 
[RSS](https://plugins.trac.wordpress.org/log/cloakpilot/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.4

 * Side menu: on a site connected to a CloakPilot account, the menu keeps the same
   order as the top bar. Until now it could come back in a different order.
 * Link addresses in Hebrew and other non-Latin scripts are shown in their own letters
   everywhere, instead of percent codes. Existing addresses and shortcodes keep 
   working.
 * Revenues: the month total includes additions for single links, so it matches 
   Reports. A script error on this screen is fixed.
 * Money on the table: a link readers click from your posts is no longer listed 
   as “nobody sees them”.
 * CSV import: a destination that is not a web address is reported as an error. 
   A new option updates links that already exist instead of skipping them.
 * Deals: switching tabs no longer saves the deal, and after saving or removing 
   a card the cards window opens again.
 * Saving a link, product or vendor shows a confirmation, and moving an item to 
   the trash offers Undo.
 * Dropdowns work with the keyboard: the arrows move, Enter picks the highlighted
   option, Home and End jump.
 * Readable top navigation, one font on every screen, long names wrap inside their
   table column, and on phones the navigation scrolls to the current section.

#### 1.0.3

 * First release on WordPress.org.
 * Short /go/ links with 301, 302 or 307 redirects, click tracking with bot filtering,
   auto-linking, vendors, categories, link positions, reports, ThirstyAffiliates
   and CSV import, optional GA4 events and a REST API.
 * Send feedback: the site address and version numbers are sent only if you tick
   the new “Also send these technical details” box (off by default).
 * The admin header font is bundled with the plugin; no request to an outside font
   service.
 * Scripts and styles load through the WordPress script and style queues; every 
   request value is sanitized and every output escaped; translation files are served
   by translate.wordpress.org.
 * AI agents and the MCP server are part of the full version (free download from
   cloakpilot.net; one agent with a free registration), not of this plugin.
 * Vendors: the “Merge into” and “Move links” dialogs show the vendor that is actually
   selected.
 * No PHP warning when an item is moved to the trash or restored.
 * Links: the “Assign vendor” window shows the link’s current vendor instead of 
   always showing “Automatic”.
 * Settings: the theme field follows the light/dark button in the top bar.

## Meta

 *  Version **1.0.4**
 *  Last updated **10 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.5 or higher **
 *  Tested up to **7.1.4**
 *  PHP version ** 8.1 or higher **
 * Tags
 * [affiliate links](https://wordpress.org/plugins/tags/affiliate-links/)[click tracking](https://wordpress.org/plugins/tags/click-tracking/)
   [link cloaking](https://wordpress.org/plugins/tags/link-cloaking/)[link management](https://wordpress.org/plugins/tags/link-management/)
   [short links](https://wordpress.org/plugins/tags/short-links/)
 *  [Advanced View](https://wordpress.org/plugins/cloakpilot/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/cloakpilot/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/cloakpilot/reviews/)

## Contributors

 *   [ cloakpilot ](https://profiles.wordpress.org/cloakpilot/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/cloakpilot/)