Deftmind Hookwright – Webhooks, REST API, Data Display & AI Chat Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
Deftmind Hookwright connects WordPress to the automation platform or service you already use, in both directions, and turns what comes back into something visitors can see.
Receive and display. Point any workflow at the plugin’s secure endpoint. Payloads arrive into named channels and appear on any page through shortcodes, as formatted articles, data tables, or live-updating feeds.
Send and show the reply. Add a form to any page. Submissions are proxied through your own server to your webhook, and the reply renders in place without a page reload. Your authentication token never reaches the browser. If your platform cannot answer on the connection the form opened – or the work takes minutes – callback mode hands it a one-time return URL to post the answer back to instead.
Private AI chat, without vendor lock-in. Turn on conversation mode and a form becomes a threaded chat. Each turn sends the running conversation to your workflow, so a retrieval-augmented (RAG) pipeline can answer with context. The intelligence stays in your workflow: no API keys stored in WordPress, any model or vector database, and no third-party chat service in the middle.
Anonymous and ephemeral by design. Visitors need no account. Nothing about a conversation is written to your database; the thread lives in the visitor’s browser and is gone on reload. For sites answering sensitive questions, that is a feature, not a limitation.
Works with the form you already have. If your site already uses a form plugin, add a couple of data attributes to its markup and Hookwright handles the round trip without replacing anything.
Built for safety
- Inbound endpoint disabled until you set a shared secret, then verified with a timing-safe comparison.
- Payload content is escaped or sanitised on every path. Markdown is parsed in safe mode and then filtered again through WordPress’s own post sanitiser.
- Outbound requests use WordPress’s protected HTTP functions, which reject internal and reserved addresses.
- Rate limiting, honeypot spam trapping, size caps and request timeouts on public endpoints.
Where data goes
This plugin only contacts the URLs you configure. It sends nothing to the plugin author, contains no tracking, and makes no external requests of its own. It is not an AI product and calls no AI service of its own: any intelligence comes from the workflow you point it at.
Third-party code
This plugin bundles Parsedown 1.7.4 by Emanuil Rusev (https://parsedown.org), used in safe mode to render Markdown. Parsedown is MIT licensed and the full licence text is reproduced in includes/class-hookwright-markdown.php. The class is renamed so it cannot collide with another plugin bundling its own copy; it is otherwise unmodified.
Deftmind Hookwright Pro
An optional add-on that extends this plugin with content publishing: incoming payloads become real WordPress posts or pages – titles, Markdown bodies, categories, tags and featured images mapped to native fields – and the reply your workflow sends back to a form can be saved the same way.
Details and download: https://deftmindlabs.com/hookwright/
Documentation: https://deftmindlabs.com/docs-reference/
Screenshots
Ask a question on any page. Your own workflow answers, and the reply renders in place – formatted, with no page reload.
Conversation mode turns the same form into a threaded chat. Each turn sends the running conversation to your workflow, so it can answer with context. Nothing is stored on your site.
Three ways to get the answer back: wait for it, send one way and ignore the reply, or – for a workflow that takes minutes – let it post the answer to a one-time return URL.
One screen connects your site to any automation platform. Your webhook address and any token stay on the server and never reach a visitor’s browser.
Payloads pushed in from your automation arrive in named channels, with a ready-to-copy shortcode and every displayable field detected for you.
