Protuno - AI Super Agents Connector · version 1.1.0 · GPL-2.0-or-later
A small plugin that connects your WordPress site to Protuno. It checks what your site can expose to an AI agent, helps you switch that on, and creates the application password Protuno signs in with. It keeps no copy of it.
01
Four screens in wp-admin. It is distributed from protuno.com, not the WordPress.org directory.
Download the plugin from your Protuno dashboard, upload it in WordPress and activate it. Or choose “Install it for me” in Protuno: it uses your WordPress admin login once to install the plugin and create the password, then drops it. It is never stored or logged.
The plugin checks whether your site already runs a supported MCP server. If it does, Protuno uses that one and installs nothing. If it does not, one press installs Agent Connector for WP, by Soflyy, with its Universal Abilities pack, downloaded unmodified from its maker.
WordPress creates an application password named “Protuno - AI Super Agent” for your administrator account. Copy the username and password into Protuno when you add the site. WordPress shows the password once.
The plugin screen shows Protuno Is Connected and when Protuno last read your site, with one press each to regenerate or disconnect.
02
The plugin itself does very little. What an agent can do on your site comes from the connector it installs.
What an agent can reach. Universal Abilities lets a connected agent run shell commands, evaluate PHP, read and write files and run WP-CLI. That is complete access to the WordPress install. The limits Protuno keeps on top of that, Read only by default, refused actions, rollback and the backup check, are on Trust & Safety.
To cut access, press Disconnect on the plugin screen, or revoke Protuno - AI Super Agent under Users, Profile, Application Passwords. Neither needs us. Uninstalling the plugin on its own does not remove the password, so disconnect first.
03
The plugin names the problem and the fix on its own screen.
WordPress will not issue an application password on a site served over http. Your host adds the certificate, most from their control panel in a few minutes. Then press Check Again.
Application passwords are switched off, usually by a security plugin. Turn them back on for this site or your account, or ask another administrator to connect it.
Some sites do not allow plugins to be installed from the dashboard. The plugin says so and links to the connector, so you can install it by hand.
54 checks from the address alone, then 31 more once the plugin is on. We suggest connecting a staging copy of your site first.
Run a free audit