Title: Deftmind Hookwright – Webhooks, REST API, Data Display & AI Chat Author: deftmindlabs Published: August 4, 2026 Last modified: August 4, 2026 --- Search plugins ![](https://ps.w.org/deftmind-hookwright/assets/banner-772x250.png?rev=3633579) ![](https://ps.w.org/deftmind-hookwright/assets/icon-256x256.png?rev=3633579) # Deftmind Hookwright – Webhooks, REST API, Data Display & AI Chat By [deftmindlabs](https://profiles.wordpress.org/deftmindlabs/) [Download](https://downloads.wordpress.org/plugin/deftmind-hookwright.1.0.0.zip) * [Details](https://wordpress.org/plugins/deftmind-hookwright/#description) * [Reviews](https://wordpress.org/plugins/deftmind-hookwright/#reviews) * [Installation](https://wordpress.org/plugins/deftmind-hookwright/#installation) * [Development](https://wordpress.org/plugins/deftmind-hookwright/#developers) [Support](https://wordpress.org/support/plugin/deftmind-hookwright/) ## Description Deftmind Hookwright connects WordPress to the automation platform or service you already use, in both directions, and turns what comes back into something visitors can see. **Receive and display.** Point any workflow at the plugin’s secure endpoint. Payloads arrive into named channels and appear on any page through shortcodes, as formatted articles, data tables, or live-updating feeds. **Send and show the reply.** Add a form to any page. Submissions are proxied through your own server to your webhook, and the reply renders in place without a page reload. Your authentication token never reaches the browser. If your platform cannot answer on the connection the form opened – or the work takes minutes – callback mode hands it a one-time return URL to post the answer back to instead. **Private AI chat, without vendor lock-in.** Turn on conversation mode and a form becomes a threaded chat. Each turn sends the running conversation to your workflow, so a retrieval-augmented (RAG) pipeline can answer with context. The intelligence stays in your workflow: no API keys stored in WordPress, any model or vector database, and no third-party chat service in the middle. **Anonymous and ephemeral by design.** Visitors need no account. Nothing about a conversation is written to your database; the thread lives in the visitor’s browser and is gone on reload. For sites answering sensitive questions, that is a feature, not a limitation. **Works with the form you already have.** If your site already uses a form plugin, add a couple of data attributes to its markup and Hookwright handles the round trip without replacing anything. #### Built for safety * Inbound endpoint disabled until you set a shared secret, then verified with a timing-safe comparison. * Payload content is escaped or sanitised on every path. Markdown is parsed in safe mode and then filtered again through WordPress’s own post sanitiser. * Outbound requests use WordPress’s protected HTTP functions, which reject internal and reserved addresses. * Rate limiting, honeypot spam trapping, size caps and request timeouts on public endpoints. #### Where data goes This plugin only contacts the URLs you configure. It sends nothing to the plugin author, contains no tracking, and makes no external requests of its own. It is not an AI product and calls no AI service of its own: any intelligence comes from the workflow you point it at. #### Third-party code This plugin bundles Parsedown 1.7.4 by Emanuil Rusev (https://parsedown.org), used in safe mode to render Markdown. Parsedown is MIT licensed and the full licence text is reproduced in `includes/class-hookwright-markdown.php`. The class is renamed so it cannot collide with another plugin bundling its own copy; it is otherwise unmodified. #### Deftmind Hookwright Pro An optional add-on that extends this plugin with content publishing: incoming payloads become real WordPress posts or pages – titles, Markdown bodies, categories, tags and featured images mapped to native fields – and the reply your workflow sends back to a form can be saved the same way. Details and download: https://deftmindlabs.com/hookwright/ Documentation: https://deftmindlabs.com/docs-reference/ ## Screenshots [⌊Ask a question on any page. Your own workflow answers, and the reply renders in place - formatted, with no page reload.⌉⌊Ask a question on any page. Your own workflow answers, and the reply renders in place - formatted, with no page reload.⌉[ Ask a question on any page. Your own workflow answers, and the reply renders in place – formatted, with no page reload. [⌊Conversation mode turns the same form into a threaded chat. Each turn sends the running conversation to your workflow, so it can answer with context. Nothing is stored on your site.⌉⌊Conversation mode turns the same form into a threaded chat. Each turn sends the running conversation to your workflow, so it can answer with context. Nothing is stored on your site.⌉[ Conversation mode turns the same form into a threaded chat. Each turn sends the running conversation to your workflow, so it can answer with context. Nothing is stored on your site. [⌊Three ways to get the answer back: wait for it, send one way and ignore the reply, or - for a workflow that takes minutes - let it post the answer to a one-time return URL.⌉⌊Three ways to get the answer back: wait for it, send one way and ignore the reply, or - for a workflow that takes minutes - let it post the answer to a one- time return URL.⌉[ Three ways to get the answer back: wait for it, send one way and ignore the reply, or – for a workflow that takes minutes – let it post the answer to a one-time return URL. [⌊One screen connects your site to any automation platform. Your webhook address and any token stay on the server and never reach a visitor's browser.⌉⌊One screen connects your site to any automation platform. Your webhook address and any token stay on the server and never reach a visitor's browser.⌉[ One screen connects your site to any automation platform. Your webhook address and any token stay on the server and never reach a visitor’s browser. [⌊Payloads pushed in from your automation arrive in named channels, with a ready- to-copy shortcode and every displayable field detected for you.⌉⌊Payloads pushed in from your automation arrive in named channels, with a ready-to-copy shortcode and every displayable field detected for you.⌉[ Payloads pushed in from your automation arrive in named channels, with a ready-to- copy shortcode and every displayable field detected for you. ## Installation 1. Upload the plugin through Plugins > Add New > Upload, or install from the plugin directory. 2. Activate it. 3. Open Deftmind Hookwright in the admin menu and configure a webhook URL, an inbound secret, or both. 4. Place `[hookwright_display]` or `[hookwright_form]` on a page using a Shortcode block. ## FAQ ### Do I need a specific automation platform? No. Anything that can send or receive an HTTP request with JSON works, whether that is a hosted automation service, a self-hosted workflow tool, or your own script. ### Does this include an AI? No, and deliberately so. Hookwright is the interface; your workflow supplies the intelligence. That means no API keys stored in WordPress and no lock-in to one AI vendor. ### Are chat conversations stored? No. The conversation exists only in the visitor’s browser for the life of the page. Nothing is written to your database and nothing is sent to the plugin author. ### Where do I get help? Use this plugin’s support forum on WordPress.org. It helps to say what you expected, what happened instead, which response handling mode the form uses, and anything listed under Recent send problems on the Settings screen. ### How do I report a security issue or a bug? Email support@deftmindlabs.com. Please report security problems privately rather than in the public forum, and allow time for a fix to ship before disclosing them. This address is for security reports and bug reports only – for help using the plugin, the support forum above is the faster route. ### My workflow takes longer than the request timeout Use Callback response handling. The plugin hands your workflow a one-time return URL in the payload; the workflow accepts the request, does its work, and posts the answer back whenever it is ready. The visitor keeps waiting on the page, and no PHP worker is held open in the meantime. ### I updated the plugin and something looks wrong Clear your caching plugin and any CDN cache, then reload with a hard refresh (Ctrl +Shift+R or Cmd+Shift+R). Page caches often keep serving old HTML and old JavaScript after an update. ### My payload shows as a table instead of formatted text Set the default under Deftmind Hookwright > Settings, choose a mode on the form, or add the attribute directly, for example `[hookwright_display render="markdown"]`. The shortcode attribute always wins. In auto mode the plugin renders an article when it recognises a text field in the payload and a table otherwise. ### Does it work with my automation platform? Yes. Payload shapes are normalised rather than assumed: wrapper objects such as `{" data":{...}}` are unwrapped, key names are matched loosely so `postTitle` and `post_title` both work, and category or tag lists are accepted as arrays, JSON-encoded strings, arrays of objects, or plain delimited text. ### My shortcode shows “No data yet” The channel name in the shortcode must match the channel your webhook sends exactly. Check Deftmind Hookwright > Channels for the names actually received, then clear your page cache. ### Payload HTML shows as plain text That is intentional. Raw HTML in a payload is escaped rather than rendered, because payload content is treated as untrusted. Send Markdown instead. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Deftmind Hookwright – Webhooks, REST API, Data Display & AI Chat” is open source software. The following people have contributed to this plugin. Contributors * [ deftmindlabs ](https://profiles.wordpress.org/deftmindlabs/) [Translate “Deftmind Hookwright – Webhooks, REST API, Data Display & AI Chat” into your language.](https://translate.wordpress.org/projects/wp-plugins/deftmind-hookwright) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/deftmind-hookwright/), check out the [SVN repository](https://plugins.svn.wordpress.org/deftmind-hookwright/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/deftmind-hookwright/) by [RSS](https://plugins.trac.wordpress.org/log/deftmind-hookwright/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * First public release. * Two-way connection to any automation platform: a form sends a visitor’s question to your workflow and renders the reply in place, and an authenticated endpoint receives payloads for display. * Three ways to receive a reply – wait for it, send one way, or Callback, where a workflow that cannot answer on the open connection posts its answer to a one- time return URL instead. Suits platforms that cannot respond to an incoming webhook, and workflows that run for minutes. * Conversation mode turns a form into a threaded chat, sending the running conversation to your workflow each turn. Nothing is stored on the site. * Incoming payloads arrive in named channels and display through shortcodes as articles, tables or live-updating feeds. * Bridge mode adds the same round trip to a form you already have, using data attributes on your own markup. * Secure by default: the inbound endpoint stays closed until a secret of at least 16 characters is set, outbound URLs are checked against private and reserved ranges, all rendered content is escaped or sanitised, and the plugin contacts nothing but the addresses you configure. ## Meta * Version **1.0.0** * Last updated **10 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.0.2** * PHP version ** 7.4 or higher ** * Tags * [AI](https://wordpress.org/plugins/tags/ai/)[automation](https://wordpress.org/plugins/tags/automation/) [chat](https://wordpress.org/plugins/tags/chat/)[rest-api](https://wordpress.org/plugins/tags/rest-api/) [webhook](https://wordpress.org/plugins/tags/webhook/) * [Advanced View](https://wordpress.org/plugins/deftmind-hookwright/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/deftmind-hookwright/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/deftmind-hookwright/reviews/) ## Contributors * [ deftmindlabs ](https://profiles.wordpress.org/deftmindlabs/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/deftmind-hookwright/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://selar.com/showlove/deftmindlabs)