GOMAX Connect

GOMAX Connect is a free, single standalone plugin. Every feature described here is included for free and nothing is locked behind an upgrade.

Free vs paid: this plugin (GOMAX Connect) is free. Optional paid upgrades — GOMAX PRO and GOMAX Ultimate — are separate products sold on our own website at https://thebuzzbazaar.com/gomax-shop/ . They are not required to use this plugin. The plugin shows a single, non-intrusive “Upgrade” tab and a small promo on its own admin page only; it does not add admin-wide banners, popups, or collect any data without consent.

The plugin exposes the REST namespace:

The OpenAPI schema endpoint is:

The schema is generated dynamically from Settings > GOMAX Connect > Tool Access. Disabled actions are removed from the schema and are blocked at runtime.

Upgrades

GOMAX Connect is free. If you want more, two optional paid products are available on our website:

• GOMAX PRO — advanced AI agents, business automation, content generation, SEO and WooCommerce assistants. https://thebuzzbazaar.com/produkt/gomax-pro/
• GOMAX Ultimate — the full business operating system: 400+ actions, multi-agent teams, brain memory, Elementor AI builder, WooCommerce automation, and local analytics/CRM/email/SMS. https://thebuzzbazaar.com/produkt/gomax-ultimate/

These are external products sold at https://thebuzzbazaar.com/gomax-shop/ and are entirely optional. No free feature of this plugin requires them.

Endpoints

• GET /schema
• POST /content
• POST /manage
• POST /media-upload
• POST /elementor
• POST /forms
• POST /woocommerce
• POST /users
• POST /seo
• POST /backup
• POST /cache
• POST /https
• GET|POST /ai-engine

Security

The plugin uses standard WordPress authentication for REST requests, including Application Passwords and Basic Auth handled by WordPress. Administrative capability checks are enforced for REST calls. WooCommerce calls may use WooCommerce management capability, and site administrators always work.

The plugin does not expose shell access, arbitrary PHP execution, wp-config.php editing, .htaccess editing, WordPress core/plugin/theme file editing, or direct SQL execution.

The HTTPS tool only supports HTTPS URLs. It blocks localhost, loopback, private IP ranges, reserved/internal IP ranges and unresolved hosts. Public hosts must be explicitly allow-listed unless “Allow any public HTTPS host” is enabled.

AI Engine

When Meow Apps AI Engine is active and the option is enabled, the plugin registers:

The function can call only tools enabled in GOMAX Connect settings. Public/frontend write actions are blocked by default unless the visitor is a logged-in administrator.