Title: Kommentti Author: kommentti Published: October 28, 2026 Last modified: October 28, 2026 --- Search plugins ![](https://ps.w.org/kommentti/assets/banner-772x250.png?rev=3770040) ![](https://ps.w.org/kommentti/assets/icon-256x256.png?rev=3770040) # Kommentti By [kommentti](https://profiles.wordpress.org/kommentti/) [Download](https://downloads.wordpress.org/plugin/kommentti.0.2.0.zip) * [Details](https://wordpress.org/plugins/kommentti/#description) * [Reviews](https://wordpress.org/plugins/kommentti/#reviews) * [Installation](https://wordpress.org/plugins/kommentti/#installation) * [Development](https://wordpress.org/plugins/kommentti/#developers) [Support](https://wordpress.org/support/plugin/kommentti/) ## Description Kommentti connects your WordPress publication to the Kommentti comment and community service. * Standard iframe installation on every Kommentti plan. * On-site moderation from Comments Kommentti on Starter and higher plans, with a personal encrypted server credential for each editor. * Optional server-rendered comment lists with the Publisher and Media Network service plans. * Sign-in, registration, replies and reports inside the article’s AJAX widget. * Automatic placement for classic and block theme comment areas. * A Kommentti comments block and the [kommentti_comments] shortcode. * Meta-tag domain verification assistance. * Read-only API credentials kept on the server, encrypted using WordPress salts. * Short-lived comment caching, signed webhook invalidation and page-cache purge hooks. * Existing WordPress comments remain in the WordPress database. * English, Turkish, German, French, Finnish and Spanish interface translations. Test your theme and full-page/CDN cache before deploying to a busy publication. The plugin does not promise search indexing, ranking or citation in AI answers. #### External service A Kommentti account and a verified public HTTPS website are required. Free service includes one website and 500 new comments per month. The plugin is free; paid service features and limits are enforced by Kommentti. The plugin contacts https://api.kommentti.com only after the administrator configures and permits the service connection. Connection checks send the site ID, site origin and language. Server display sends the site ID, discussion ID, language, page and a private read-only credential in the Authorization header. The credential is never placed in a browser URL or public HTML. On-site moderation is an optional administrator/editor workflow. Each WordPress user with moderate_comments permission saves their own personal Kommentti moderation key. It is stored encrypted per user and site. An authenticated, nonce-protected WordPress request sends a short-lived challenge, the configured site origin and this key to the Kommentti grant service. A dedicated iframe receives a one-use grant and displays pending comments only after Kommentti verifies site ownership or assigned moderator rights and the eligible service plan. Keys are not exposed to the browser. Removing a local saved key does not revoke it remotely; revoke it in Kommentti when no longer needed. The public comment widget loads the documented Kommentti service script and iframe. Visitors connect directly to Kommentti, which receives connection information such as IP address and browser information, and processes account details and submitted comments. Published comments expose the author’s display name, text and dates. This plugin does not send analytics or telemetry. Signed notifications from Kommentti are received at the WordPress REST URL shown in Settings Kommentti. These contain event metadata and site/discussion identifiers, not private account details or comment bodies. Service: https://kommentti.com Terms of use: https://kommentti.com/terms Privacy: https://kommentti.com/privacy Support and installation: https://kommentti.com/developers Provider: Cen Medya Limited Şirketi, info@kommentti.com ## Screenshots [⌊Website connection, display modes and protected API settings in the Turkish interface. Five other interface languages are also included.⌉⌊Website connection, display modes and protected API settings in the Turkish interface. Five other interface languages are also included.⌉[ Website connection, display modes and protected API settings in the Turkish interface. Five other interface languages are also included. [⌊The Kommentti Developer Portal explains WordPress installation, domain verification and comment placement.⌉⌊The Kommentti Developer Portal explains WordPress installation, domain verification and comment placement.⌉[ The Kommentti Developer Portal explains WordPress installation, domain verification and comment placement. ## Blocks This plugin provides 1 block. * Kommentti comments Comments for the current article, powered by Kommentti. ## Installation 1. Upload the kommentti folder to wp-content/plugins, or upload the ZIP through Plugins Add Plugin Upload Plugin. 2. Activate Kommentti Comments. Activation alone does not enable the external service. 3. Open Settings Kommentti. Enter your site ID from your Kommentti dashboard. 4. If needed, paste the 48-character meta verification value, save, and verify the domain in Kommentti. DNS TXT verification is also supported by the service. 5. Choose a display mode, post types and placement. Enable the service connection and comments, then save. 6. Use Test connection and open a published article on your HTTPS website. #### Server-rendered display Create a read-only API key under your site’s API settings in Kommentti, then save it in the plugin. A Publisher or Media Network service plan is required for this API. Secrets may instead be configured with KOMMENTTI_API_KEY and KOMMENTTI_WEBHOOK_SECRET constants in wp-config.php, optionally populated from environment variables. Do not commit secrets to source control. Copy the webhook receiver URL from the plugin into Kommentti API settings. Save the signing secret generated there in the plugin, and send a test notification. Saving a webhook in Kommentti rotates its secret; update WordPress with the new value. The plugin uses WordPress HTTP requests, TLS verification, no redirects, a two-second timeout and bounded response sizes. Valid snapshots are cached for at most 60 seconds. Expired comments are never served during an API outage; the standard Kommentti widget is used instead. API quotas and comment quotas are separate. #### Placement and existing comments Automatic placement replaces the classic comment template or the core Comments block. In custom layouts, select manual placement and insert the Kommentti comments block or [kommentti_comments]. Use one article discussion per page; duplicate rendering is suppressed. For manual layouts remove the theme’s native Comments block if you want to show only the Kommentti discussion. The default discussion ID is the WordPress post ID, matching Kommentti’s WordPress WXR import. An administrator may enter an existing discussion ID in the post editor’s Kommentti discussion box. Keep the same ID when switching display modes, renaming posts or changing permalinks. Moving posts to another WordPress installation may change post IDs; preserve discussion mappings during migration. To migrate existing WordPress comments, use Tools Export, then preview and approve the WXR file in Kommentti. Imports require Starter or above. Existing WordPress comments are not automatically uploaded or deleted. On-site moderation is available through Comments Kommentti with a personal connection on Starter and higher plans. This plugin does not provide server-side comment writing, WordPress visitor-account SSO or automatic two-way comment synchronization. Password-protected, draft and excluded post types do not load the widget. The WordPress closed-comments setting hides posting in this integration while preserving the hosted discussion. To enforce a lock for all clients, also lock the discussion in Kommentti. #### Cache and deployment A valid webhook invalidates the matching article’s comment snapshot and requests article purges from WP Rocket, WP Super Cache, W3 Total Cache and LiteSpeed when their purge APIs are present. Site-wide events request a site-wide purge. Custom cache integrations can use the kommentti_purge_post and kommentti_purge_site actions. Cloudflare and other external CDN caches need their own purge or expiry policy. A long-lived HTML cache can keep a removed comment visible even after the plugin cache was invalidated. Test your actual cache stack. WP-Cron is not required for incoming webhook invalidation. Configuration is per WordPress site. A staging copy with a different host pauses the integration until the administrator reconnects it. Do not share one site’s API key across unrelated WordPress sites. Subdirectory publications sharing one hostname require separate planning because domain changes cannot distinguish those copies. Deactivate the plugin to restore the theme’s native comment handling. WordPress comments and hosted Kommentti comments are preserved. Uninstall removes plugin settings, encrypted credentials and cache metadata; existing discussion mappings remain for future reinstallation. Revoke unused server API keys in Kommentti. Rotating WordPress authentication salts makes stored credentials unreadable; re-enter them afterwards. ## FAQ ### Is the plugin free? Yes. A Kommentti account is required. Standard embedding works with all service plans, including Free. The read API used for server display requires Publisher or Media Network. ### Are comments visible without JavaScript? Server mode puts approved comments into the initial page HTML. Reading and pagination work without JavaScript. Account actions, posting, replies and reports require JavaScript. Standard iframe mode requires the service widget. ### Does deactivation copy hosted comments into WordPress? No. Hosted comments stay in Kommentti. Existing native comments are preserved. Use the service’s supported export/import tools when planning a migration. ### Does this automatically register WordPress users with Kommentti? No. Readers use their Kommentti account in the inline widget. WordPress user accounts and permissions are not shared with the service. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Kommentti” is open source software. The following people have contributed to this plugin. Contributors * [ kommentti ](https://profiles.wordpress.org/kommentti/) [Translate “Kommentti” into your language.](https://translate.wordpress.org/projects/wp-plugins/kommentti) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/kommentti/), check out the [SVN repository](https://plugins.svn.wordpress.org/kommentti/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/kommentti/) by [RSS](https://plugins.trac.wordpress.org/log/kommentti/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 0.2.0 * Add personal, role-checked on-site moderation in the WordPress Comments menu. * Use one-use grants and a separate iframe session; keep server keys encrypted per user. #### 0.1.1 * Prepare the WordPress.org submission with verified contributor information and service terms. #### 0.1.0 * First beta: iframe and server HTML modes, setup and diagnostics, block/shortcode/ theme placement, verification helper, encrypted credentials and signed cache invalidation. ## Meta * Version **0.2.0** * Last updated **1 day ago** * Active installations **Fewer than 10** * WordPress version ** 6.5 or higher ** * Tested up to **7.1.4** * PHP version ** 8.1 or higher ** * Tags * [comments](https://wordpress.org/plugins/tags/comments/)[community](https://wordpress.org/plugins/tags/community/) [discussion](https://wordpress.org/plugins/tags/discussion/)[moderation](https://wordpress.org/plugins/tags/moderation/) * [Advanced View](https://wordpress.org/plugins/kommentti/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/kommentti/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/kommentti/reviews/) ## Contributors * [ kommentti ](https://profiles.wordpress.org/kommentti/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/kommentti/)