WordPress Integration

The WordPress integration lets Convor authenticate against the WordPress REST API with a WordPress Application Password. The live chat widget is still installed with the standard Convor script tag, so no WordPress plugin is required.

Prerequisites

• WordPress 5.6 or later
• Application Passwords enabled for the WordPress user
• WordPress REST API reachable at /wp-json/wp/v2/users/me
• Admin access to the WordPress site
• Convor Growth plan or higher

Create an Application Password

In WordPress Admin, open Users, then Profile. Scroll to Application Passwords, enter a name such as Convor, and click Add New Application Password. Copy the generated password immediately because WordPress will not show it again.

# WordPress username: admin
# Application Password: xxxx xxxx xxxx xxxx xxxx xxxx

Dashboard Configuration

In Convor, open Integrations → WordPress. Enter:

• siteUrl: the WordPress site root, for example https://yoursite.com
• username: the WordPress username that owns the application password
• applicationPassword: the generated WordPress Application Password
• postTypes: at least one of post, page, or custom_post_type

{
  "integration": "wordpress",
  "siteUrl": "https://yoursite.com",
  "username": "admin",
  "applicationPassword": "xxxx xxxx xxxx xxxx xxxx xxxx",
  "postTypes": ["post", "page"]
}

After the first save, the application password field is masked. When editing the site URL, username, or post types, leave the application password field blank to keep the saved encrypted password. Enter a new password only when rotating credentials.

Test and Cleanup

Use Test Connection after saving. Convor verifies the saved WordPress credentials against the site's REST API. Disconnecting removes the saved WordPress configuration from Convor; it does not revoke the Application Password in WordPress. Revoke that password from the WordPress user profile when you retire the connection.

Widget Install

Add the widget script tag directly to your theme before the closing body tag.

<script src="https://cdn.convor.io/widget.js"
  data-key="convor_wpk_..."
  async>
</script>

Features

Troubleshooting

• Application Passwords missing: confirm the site runs WordPress 5.6 or later and Application Passwords are not disabled by a security plugin.
• 401 from WordPress: rotate the Application Password and update Convor with the new value.
• Widget not loading: check that data-key matches the public widget key copied from Convor exactly (convor_wpk_...).
• CDN or proxy issues: make sure /wp-json/ is reachable through the same public URL saved in Convor.