Description
RankOak Connect links your WordPress site to RankOak, an SEO content platform that drafts and publishes articles for you. After you install this plugin:
- Open RankOak Connect in your WordPress admin and click Generate API key.
- Copy the key from the pop-up (you only see the full key once).
- Paste it into RankOak when connecting your site.
RankOak then calls your site’s REST API using that key to create posts (and optional tags). This plugin does not create WordPress application passwords or add custom login flows — you stay in control with a revocable site key.
What this plugin does
- RankOak Connect admin screen: Generate / regenerate / revoke a site API key
- A read-only public REST check so RankOak can see the plugin is active (
/wp-json/rankoak/v1/ping) - Authenticated REST routes protected by the API key (e.g. verify identity, create posts) when you connect from RankOak
Who should use it
Site administrators who use RankOak and want a one-key connection similar to other SaaS “generate API key in WordPress” plugins.
Privacy
This plugin does not send analytics to RankOak. Your site is contacted by RankOak’s servers when you have saved an API key in RankOak and use RankOak features that publish to WordPress, as described under External services.
External services
This plugin is an interface to RankOak, a third-party SaaS product.
- Service: RankOak (
https://rankoak.com/) - What is transmitted: When you use RankOak to publish, RankOak’s servers call your site’s WordPress REST API on routes registered by this plugin, using the API key you generated. Post titles, content, and optional images are sent over HTTPS to your own WordPress site only—not to unrelated third parties for advertising or tracking.
- When it runs: When you have connected the site in RankOak (saved the key) and use RankOak features that create or update posts.
- Terms of use: https://rankoak.com/terms
- Privacy: https://rankoak.com/privacy
No other external servers are contacted by this plugin for tracking or telemetry.
Installation
- Install and activate the plugin through the Plugins screen in WordPress.
- In WordPress admin, open RankOak Connect and click Generate API key. Copy the key from the pop-up (full key is only shown once).
- In your RankOak account, connect WordPress and paste the API key when prompted.
FAQ
-
Do I need a RankOak account?
-
Yes. RankOak is a separate service. This plugin stores a key for RankOak to use the documented REST API.
-
Who can generate the API key?
-
Users with the
manage_optionscapability (typically administrators). -
Can I rotate the key?
-
Yes. Use Regenerate or Revoke on the RankOak Connect screen. After rotating, update the key in RankOak.
-
Does this plugin modify public pages on my site?
-
No. It does not inject scripts, links, or credits on the front end of your website.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“RankOak Connect” is open source software. The following people have contributed to this plugin.
Contributors
Translate “RankOak Connect” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.3.6
- Review compliance: move admin modal CSS/JS from raw
<style>/<script>output to properadmin_enqueue_scriptsassets. - Remove inline style attributes from plugin admin markup and style them in the enqueued stylesheet.
1.3.5
- Plugin Check: sanitize
$_SERVER['HTTPS']withsanitize_text_fieldafterwp_unslash.
1.3.4
- Plugin Check: use
wp_delete_file()instead ofunlink(); sanitize$_SERVERusage for HTTPS/admin notice; readme short description ≤150 characters.
1.3.3
- API key modal: RankOak green styling (backdrop, header gradient, buttons, focus rings) aligned with rankoak.com brand colors.
1.3.2
- After generating or regenerating a key, show a full-screen modal with copy button and clear security copy (no easy-to-miss admin notice only).
- Clearer plugin header and readme description for RankOak + WordPress.
1.3.1
- REST publish: optional
tagsarray mapped to WordPress post tags (wp_set_post_tags).
1.3.0
- Breaking change: Replaces the previous OAuth + application password exchange with a plugin API key flow (generate in wp-admin, paste in RankOak).
- REST:
GET /wp-json/rankoak/v1/meandPOST /wp-json/rankoak/v1/posts(Bearer orX-RankOak-Key); keys stored withwp_hash_password. - Admin: top-level RankOak Connect menu; nonces on generate/revoke; no unauthenticated
$_GETconnection parameters. - Removes programmatic
WP_Application_Passwords::create_new_application_passwordusage. - Uninstall: remove new options and transients.
1.2.2
- uninstall.php: wrap in prefixed function; PHPCS ignore for required SELECT-by-prefix during uninstall
1.2.1
- readme: Tested up to 6.9 (directory requirement)
- Remove load_plugin_textdomain (WordPress.org loads translations automatically)
- uninstall: delete transients via delete_option instead of raw SQL
1.2.0
- Security: require a nonce-protected POST confirmation before creating an application password (CSRF mitigation)
- Capability: connection and settings restricted to
manage_options - Add uninstall cleanup for options and OAuth transients
- Add GPLv2 license block in the main plugin file; load textdomain; basic REST rate limiting on exchange
- Readme: External services disclosure for WordPress.org directory compliance
1.1.0
- Public ping endpoint for connection detection
- Auto-save RankOak app origin on first successful OAuth redirect
- Packaging improvements
1.0.0
- Initial release