Description
Command Modular AI Website Attendant connects your WordPress site to the AI Website Attendant™ service and loads the chat widget without pasting third-party scripts that Wordfence, CSP, and ad blockers often block.
Important: This plugin requires an active AI Website Attendant account and connected website. The free plugin alone cannot answer visitor chats without that service.
Connect methods
- Connect Account (recommended) — one-click OAuth to your AI Website Attendant™ portal.
- API Key — master or personal token from Settings Integrations.
- Site Key — widget-only mode using the public embed site key.
First-party architecture
The visitor browser talks only to your WordPress origin (/cmaiwa/embed.js and /wp-json/cmaiwa/v1/...). WordPress uses wp_remote_* to reach the AI Website Attendant™ API server-to-server. REST routes require a matching connected site key in permission_callback (constant-time compare) before any upstream proxy request is made.
External services
This plugin requires the AI Website Attendant hosted service. It does not work as a standalone chatbot. From your WordPress server it contacts the following first-party endpoints operated by AI Website Attendant (Command Modular). No visitor browser calls are made directly to third-party domains when the plugin is used as intended.
If you use Wordfence or similar, allow the REST namespace cmaiwa/v1 if requested.
AI Website Attendant API
This service is used to connect your WordPress site to your AI Website Attendant account and to generate chat answers from your site’s knowledge base.
The plugin sends data to https://api.aiwebsiteattendant.com/api/v1 (or a custom Upstream API URL you configure) in these cases:
- When an administrator uses Connect Account: the one-time pairing code, CSRF state, and the WordPress site hostname are posted to
/integrations/wordpress/exchange. - When an administrator uses API Key connect: the API token (Authorization header), platform identifier (
wordpress), WordPress hostname, and optional site ID are posted to/integrations/connect-with-key. - When a visitor uses the chat widget: WordPress reverse-proxies the request to the embed API. That can include chat message text, session identifiers, widget config requests, feedback, optional voice audio (transcribe), link-preview URLs, and the site Origin/Referer.
This service is provided by AI Website Attendant: Terms of Service, Privacy Policy.
AI Website Attendant portal and script CDN
This service is used for account connection in wp-admin and to fetch the official chat widget scripts so WordPress can serve them first-party.
The plugin contacts https://apps.aiwebsiteattendant.com in these cases:
- When an administrator starts Connect Account: the browser is redirected to the portal with the WordPress callback URL, a CSRF state value, and the site hostname.
- When the storefront loads the widget: WordPress requests
embed.jsandembed.widget.jsfrom the CDN (the public site key may be included as a query parameter). - When an administrator opens Dashboard or Support from the plugin settings screen.
This service is provided by AI Website Attendant: Terms of Service, Privacy Policy.
Screenshots
Installation
- Install and activate Command Modular AI Website Attendant.
- Create or sign in to an AI Website Attendant account at apps.aiwebsiteattendant.com.
- Open Command Modular AI Website Attendant in the WordPress admin menu.
- Choose Connect Account, API Key, or Site Key and finish connecting a website.
- Visit a public page to see the widget.
FAQ
-
Do I need a paid or registered account?
-
Yes. The plugin connects your WordPress site to AI Website Attendant™. You need an account (and an active subscription for production use) from the AI Website Attendant portal.
-
Why not paste the CDN script?
-
Third-party
fetchto the API is often blocked. This plugin proxies scripts and API calls first-party through your WordPress site. -
What visitor data is sent externally?
-
When a visitor uses the chat widget, message content and related request metadata needed for chat (such as session identifiers) are sent from WordPress to the AI Website Attendant™ API for your connected site. See the External services section, the Terms of Service, and the Privacy Policy.
-
Can I change the API or CDN URL?
-
Yes. After connect, the plugin stores the Upstream API URL returned by the service. Advanced installs can also set portal/CDN defaults in plugin settings stored in WordPress options.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Command Modular AI Website Attendant” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Command Modular AI Website Attendant” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.0
- Initial release with Connect Account (OAuth), API Key, and Site Key modes.
- First-party embed script proxy and REST reverse proxy for chat APIs.
- Dashboard and Support links in the admin settings screen.
- Subscription expiry and next recurring date display with an expired-subscription alert.
- Documented AI Website Attendant API and portal/CDN usage in External services, including data sent and links to Terms of Service and Privacy Policy.