Deftmind Hookwright – Webhooks, REST API, Data Display & AI Chat
Deftmind Hookwright connects WordPress to the automation platform or service you already use, in both directions, and turns what comes back into something visitors can see.
Receive and display. Point any workflow at the plugin’s secure endpoint. Payloads arrive into named channels and appear on any page through shortcodes, as formatted articles, data tables, or live-updating feeds.
Send and show the reply. Add a form to any page. Submissions are proxied through your own server to your webhook, and the reply renders in place without a page reload. Your authentication token never reaches the browser. If your platform cannot answer on the connection the form opened – or the work takes minutes – callback mode hands it a one-time return URL to post the answer back to instead.
Private AI chat, without vendor lock-in. Turn on conversation mode and a form becomes a threaded chat. Each turn sends the running conversation to your workflow, so a retrieval-augmented (RAG) pipeline can answer with context. The intelligence stays in your workflow: no API keys stored in WordPress, any model or vector database, and no third-party chat service in the middle.
Anonymous and ephemeral by design. Visitors need no account. Nothing about a conversation is written to your database; the thread lives in the visitor’s browser and is gone on reload. For sites answering sensitive questions, that is a feature, not a limitation.
Works with the form you already have. If your site already uses a form plugin, add a couple of data attributes to its markup and Hookwright handles the round trip without replacing anything.
Built for safety
- Inbound endpoint disabled until you set a shared secret, then verified with a timing-safe comparison.
- Payload content is escaped or sanitised on every path. Markdown is parsed in safe mode and then filtered again through WordPress’s own post sanitiser.
- Outbound requests use WordPress’s protected HTTP functions, which reject internal and reserved addresses.
- Rate limiting, honeypot spam trapping, size caps and request timeouts on public endpoints.
Where data goes
This plugin only contacts the URLs you configure. It sends nothing to the plugin author, contains no tracking, and makes no external requests of its own. It is not an AI product and calls no AI service of its own: any intelligence comes from the workflow you point it at.
Third-party code
This plugin bundles Parsedown 1.7.4 by Emanuil Rusev (https://parsedown.org), used in safe mode to render Markdown. Parsedown is MIT licensed and the full licence text is reproduced in includes/class-hookwright-markdown.php. The class is renamed so it cannot collide with another plugin bundling its own copy; it is otherwise unmodified.
Deftmind Hookwright Pro
An optional add-on that extends this plugin with content publishing: incoming payloads become real WordPress posts or pages – titles, Markdown bodies, categories, tags and featured images mapped to native fields – and the reply your workflow sends back to a form can be saved the same way.
Details and download: https://deftmindlabs.com/hookwright/
Documentation: https://deftmindlabs.com/docs-reference/