GDimitrov

MegaManager Connector allows you to connect your WordPress site to the <a href="https://wpmegamanager.com" rel="nofollow ugc">MegaManager</a> platform for:
<ul>
<li>Real-time Monitoring – Keep track of your site’s health and uptime status</li>
<li>Automated Backups – Schedule and manage full-site cloud backups</li>
<li>Remote Updates – Update plugins, themes, and WordPress core remotely</li>
<li>Cache Management – Clear page, object, and OPcache directly from admin bar or dashboard</li>
<li>Plugin Management – Activate and deactivate plugins from the dashboard</li>
<li>Security – Secure communication with HMAC signatures</li>
<li>Database Optimization – Analyze and optimize database tables remotely</li>
<li>Maintenance Mode – Enable/disable maintenance mode without writing files</li>
</ul>
<h3>External Services</h3>
This plugin connects to the MegaManager platform API to provide remote site management features. The service is hosted at <code>https://wpmegamanager.com/api/fn</code>.
What data is sent and when:
<ul>
<li>Site Registration (on connect): Your site URL, WordPress version, PHP version, and a generated site secret are sent once when you connect the plugin to MegaManager.</li>
<li>Heartbeat (every 5 minutes while connected): Site ID, WordPress version, PHP version, and site URL are sent to confirm your site is online and reachable. The heartbeat is essential for the connection status feature and runs automatically while the plugin is connected. It does NOT send any content, user data, or analytics — only basic environment identifiers.</li>
<li>Metrics (hourly, opt-in only): When you enable telemetry in the plugin settings, performance data (TTFB, page size, plugin list, theme, PHP/WP versions, disk/database size, activity logs) is sent hourly. This is disabled by default and requires explicit opt-in via the Settings > MegaManager page. You can disable it at any time; the setting takes effect immediately.</li>
<li>Backup operations: During cloud backups, your database and wp-content files are uploaded to MegaManager cloud storage via signed URLs.</li>
</ul>
No data is sent until you explicitly connect the plugin by entering a Connect Token from the MegaManager dashboard.
<ul>
<li>Terms of Service: <a href="https://wpmegamanager.com/terms" rel="nofollow ugc">https://wpmegamanager.com/terms</a></li>
<li>Privacy Policy: <a href="https://wpmegamanager.com/privacy" rel="nofollow ugc">https://wpmegamanager.com/privacy</a></li>
</ul>

MegaManager Connector

Connects your WordPress site to MegaManager for monitoring, backups, cache management, and remote administration.

Digitizer

SiteAgent is the bridge between your WordPress sites and the <a href="https://my-aura.app" rel="nofollow ugc">Aura infrastructure dashboard</a> — a unified control center for teams managing multiple WordPress sites alongside servers, CDN, and DNS.
Install this plugin on any WordPress site to unlock remote management capabilities directly from Aura — no SSH, no wp-admin juggling, no manual logins.
<h4>What You Can Do</h4>
<ul>
<li>Monitor site health — See WordPress version, PHP version, installed plugins & themes, database info, and disk usage in real time.</li>
<li>Update plugins, themes & core remotely — Push updates to any connected site from the Aura dashboard, no wp-admin login.</li>
<li>Safe batch updates with auto-rollback — Run chunked updates with health checks; if an update breaks the site, the plugin restores the previous version automatically.</li>
<li>Per-plugin rollback — Every update is zip-snapshotted first; restore any plugin to its last good state on demand.</li>
<li>Bulk translation & database upgrades — Update all language packs and run WordPress database migrations remotely.</li>
<li>One-click connect (magic link) — Connect a site to Aura straight from wp-admin — no manual token copy/paste.</li>
<li>AI-agent ready (MCP tools) — Exposes machine-readable tools (site context, safe plugin update, asset cleanup, vulnerability checks) for AI-driven management.</li>
<li>Zero frontend impact — The plugin only registers REST API endpoints. No scripts, no styles, no database queries on visitor-facing page loads.</li>
</ul>
<h4>How It Works</h4>
After activation, click Connect to Aura on the Settings → SiteAgent page for a one-click magic-link connection, or copy the Site Token shown once and paste it into your Aura dashboard manually. From that point, Aura communicates with your site over a signed, authenticated REST API to pull health data and push updates.
<h4>Security</h4>
Defence-in-depth protects every request:
<ol>
<li>WordPress Application Password — Standard WordPress auth with capability checks (<code>manage_options</code> / <code>update_*</code>). Only authorized administrators can trigger actions.</li>
<li>Hashed Site Token — A per-site token sent via the <code>X-Aura-Token</code> header. Only a SHA-256 hash is stored (never the raw token), compared timing-safely. Tokens from older versions migrate to a hash automatically.</li>
<li>Brute-force throttling — Repeated bad-token attempts from an IP are blocked.</li>
<li>Signed magic-link connect — The onboarding callback is HMAC-signed with a one-time secret and timestamp, so the token exchange can’t be hijacked or replayed.</li>
<li>IP / Domain allowlist (optional) — Restrict API access to your Aura instance, with Cloudflare and reverse-proxy header support.</li>
</ol>
You can rotate the token anytime from Settings → SiteAgent → Regenerate Token.
<h4>REST API Endpoints</h4>
Core endpoints under <code>/wp-json/aura/v1/</code>:
<ul>
<li><code>GET /status</code> — Full site health report</li>
<li><code>GET /updates</code> — Check available updates (core, plugins, themes, translations)</li>
<li><code>POST /update/core</code> / <code>/update/plugin</code> / <code>/update/theme</code> / <code>/update/translations</code> — Apply updates</li>
<li><code>POST /update/database</code> — Run WordPress database upgrades</li>
<li><code>POST /connect</code> — Magic-link token exchange (public, HMAC-signed, 10-minute expiry)</li>
</ul>
Version 2 endpoints under <code>/wp-json/aura/v2/</code>:
<ul>
<li><code>GET /health</code> — HTTP, PHP fatal, white-screen and DB connectivity checks</li>
<li><code>POST /update/batch</code> — Chunked batch updates with auto-rollback on health failure</li>
<li><code>POST /rollback/{plugin}</code> — Restore a plugin from its most recent backup</li>
</ul>
MCP tools under <code>/wp-json/aura/mcp/</code>:
<ul>
<li><code>POST /tools/list</code> / <code>POST /tools/execute</code> — Enumerate and run AI-agent tools</li>
<li><code>GET /context</code> — Full site context for AI decision-making</li>
</ul>
<h4>About Aura</h4>
Aura is a full-stack operations dashboard by <a href="https://digitizer.studio" rel="nofollow ugc">Digitizer</a> that brings servers, applications, DNS zones, and CDN pull zones from Cloudways, Hostinger VPS, Cloudflare, and Bunny.net into a single unified interface.
SiteAgent extends that reach into every WordPress installation — so you can manage your entire infrastructure, including WordPress sites, from one place.
<h4>Free to Use</h4>
The plugin is completely free and open source (GPLv2+). You need a free or paid Aura account to connect your sites. <a href="https://my-aura.app" rel="nofollow ugc">Sign up at my-aura.app</a>.
<h4>Links</h4>
<ul>
<li><a href="https://my-aura.app" rel="nofollow ugc">Aura Dashboard</a></li>
<li><a href="https://my-aura.app/siteagent" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://github.com/Digitizers/SiteAgent" rel="nofollow ugc">GitHub Repository</a></li>
<li><a href="https://digitizer.studio" rel="nofollow ugc">Digitizer</a></li>
</ul>

SiteAgent for Aura

Connect your WordPress site to the Aura dashboard for remote monitoring, plugin & theme updates, and maintenance — all from one place.

MegaManager Connector vs SiteAgent for Aura