Independent approvals
Your WP Manager workspace login, WordPress administrator approval, and each AI client’s OAuth grant are distinct steps. A new client cannot automatically inherit another client’s authorization.
Read-only public beta
Production-wide WordPress writes are disabled. Future publishing and administrative changes will require separate permission and release controls.
Token and connection safety
The deployed service uses OAuth authorization-code protection, PKCE, token rotation and replay checks, owner-client-site scoping, protected session cookies, and connection revocation controls. Keep passwords and tokens out of chat and tickets.
Security reports
Email connect@delulutech.in with a redacted report. We may request evidence through a safer channel. Do not test against websites or accounts you do not administer.
See our privacy policy and support page.