DraftPilot AI Site Editor

DraftPilot AI Site Editor turns one sentence about your business into a complete, editable website.

Write a short brief (“A family-run plumbing company in Austin offering repairs, installation and 24/7 emergency service”) and the plugin will:

• Plan 3–6 pages (Home, Services, About, Contact, and more) that make sense for the business.
• Write specific, believable copy for every section.
• Apply a cohesive color palette and font pairing.
• Create every page as a draft, then wire up a navigation menu and set the front page.
• Let you refine any page in the block editor, or add a whole new section with one sentence.

Built on the WordPress core AI Client. DraftPilot AI Site Editor uses the core AI Client introduced in WordPress 7.0, so the plugin never stores API keys or provider credentials. Install an AI provider plugin of your choice and connect it under Settings → Connectors — the core AI Client handles models, keys, and billing.

Safe by design.

• Block registry — the AI may only emit a whitelist of block types (core blocks + 8 DraftPilot designer blocks). Everything is validated before it is saved; nothing raw from the LLM reaches the database.
• No prompt injection — page content generated by the AI is stored as data (JSON block attributes), never executed as code.
• Sanitized output — design tokens are validated against an allowlist before they are output as inline CSS, and all admin/editor scripts are properly enqueued.

REST API

All endpoints live under /wp-json/draftpilot-ai/v1 and require manage_options:

• POST /generate-site { "brief": "..." } → create a generation job
• GET /job/{id} → poll job status
• POST /add-section { "page_id": 4, "prompt": "..." } → append AI blocks to a page
• GET /pages → list generated pages
• POST /pages/delete-all → permanently delete generated pages
• POST /pages/trash { "page_id": 4 } → trash one page
• GET /nav-menu → list menus
• POST /nav-menu { "page_ids": [4,5], "name": "DraftPilot Site", "location": "primary" } → create or update a menu

Privacy

DraftPilot AI transmits data to the AI provider you connect. Review how your provider handles your data before generating.

• Data you send. The business brief you type, your site name and description, and the content generated from them are sent to the AI provider connected under Settings → Connectors using the WordPress core AI Client. The plugin does not transmit anything to the plugin author.
• What is stored. Plugin settings (creativity level, site slug) and your generated pages. No API keys or provider credentials are stored by the plugin.
• Full text. See the Privacy tab in the DraftPilot AI admin for the complete Terms of Service, Privacy Policy, and data provider list.