Mavrilo Connect
·
Connect your WordPress site to Mavrilo for seamless content publishing, scheduling, and social media management — without sharing your admin password.
Mavrilo Connect lets you link your WordPress site to your Mavrilo workspace using a secure plugin token. No admin username or password is ever shared.
What Mavrilo can do once connected:
- Publish and schedule blog posts from the Mavrilo dashboard
- Update existing posts and pages
- Upload media files
- Read categories, tags, and authors
- Receive real-time notifications when content changes (webhooks)
- Set Yoast SEO, RankMath, or AIOSEO metadata on posts
Security highlights:
- Zero passwords stored — authentication uses a revocable plugin token
- Token is validated on every API request using constant-time comparison
- All traffic is over HTTPS
- Revoke access any time from WordPress or from Mavrilo
Connection flow:
- Install and activate this plugin
- Go to Settings → Mavrilo Connect
- Click Connect to Mavrilo
- Sign in to your Mavrilo account and select your workspace
- Click Authorize — you’re done!
External Services
This plugin connects to Mavrilo (https://mavrilo.in), a third-party social media management platform. This connection is the entire purpose of the plugin — it cannot function without it.
When the external service is contacted:
- When you click «Connect to Mavrilo» — your browser is redirected to mavrilo.in to authenticate and authorise the connection.
- On every REST API request from Mavrilo — the plugin receives calls from mavrilo.in to publish, update, or read content.
- When content is published or changed — the plugin sends a webhook notification to mavrilo.in/api/v1/wordpress/plugin/webhook.
- On initial callback verification — the plugin calls mavrilo.in/api/v1/wordpress/plugin/verify to confirm the token is valid.
- On disconnect — the plugin calls mavrilo.in/api/v1/wordpress/plugin/disconnect to revoke the token server-side.
Data sent to Mavrilo:
- Your site URL
- Post titles, content, status, categories, tags, author IDs, and featured image URLs when content changes
- When Mavrilo requests it, the list of authors who can edit posts — their name, nicename, and email address — used only to attribute posts to the correct author
- No visitor data, no passwords, and no payment information is ever transmitted
Mavrilo privacy policy: https://mavrilo.in/legal/privacy Mavrilo terms of service: https://mavrilo.in/legal/terms
If you disconnect the plugin, Mavrilo immediately revokes the access token and no further data is transmitted.