ErrorHandle Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
Describe the result you want. errorHandle works out how to do it, shows you
exactly what it will change, lets you test it without changing anything, and
waits for your approval. Then it runs as ordinary PHP.
AI is used only when you ask it to build something. Once you approve a
change or an automation, no AI service is contacted again — however many times
the automation runs. An automation that fires ten thousand times makes zero AI
calls and behaves identically every time.
What it can do
- Change content. Replace text on one page or across the site, create and
update posts, change post status. Shown with before and after, verified
afterwards, undoable. - Build automations. “When a new user registers, email the administrator.”
“When a WooCommerce order over $1,000 is created, email me the customer name
and total.” Triggers, conditions and actions — always saved switched off
until you activate them. - Say no, clearly. Ask it to change your nginx configuration and it
explains that it runs inside WordPress and cannot reach server settings, and
that your host can. Ask it to add CSS, JavaScript, PHP or a tracking snippet
and it explains that it does not store or run code of any kind, and points
you at the tool that does.
Safety by design
- Nothing happens without your approval, and you see exactly what will change
before you give it. - Test runs a simulation. Nothing is changed and nothing is sent.
- High-risk changes require you to type APPLY, enforced on the server.
- After applying, the change is verified independently — by reading back
what was actually saved, not by trusting that the write succeeded. If it
cannot be verified, it says so rather than claiming success. - Undo is available for anything reversible. The preview tells you up front
when something is not. - AI output is never executed. The planner can only name operations the plugin
already supports; anything else is rejected.
Your free commands
On first run errorHandle asks how you want it to think. Choose
“Use errorHandle AI” and you get three AI commands straight away — no
account, no email address, no card. Nothing is sent anywhere until you make
that choice. Confirm an email address and you get seven more, for
ten in total. Ten is a lifetime figure for the site, not a monthly one.
Verifying does not reset anything. If you have already used all three, you
have seven left, not ten.
Deleting the plugin and installing it again does not grant a fresh ten. The
count belongs to the site, not to the copy of the plugin, and it is kept on
errorHandle’s side so that reinstalling, clearing settings or dropping the
plugin’s tables make no difference.
When the ten are gone, nothing you have already built stops working.
Automations, scheduling, history and undo never used AI and keep running.
Every capability of the plugin remains available. To carry on creating with AI you connect your own provider key —
see below — which errorHandle does not meter at all.
A Pro tier is intended, where errorHandle supplies the AI with a monthly
allowance. It does not exist yet. There is no billing, no licensing and
nothing to buy in this version, and the plugin will not offer you a purchase.
Bring your own AI key
Connect your own provider account and errorHandle steps out of the way
entirely. Your provider bills you directly at their rates, and errorHandle
does not count, cap or meter those commands — there is no limit from us
because there is no cost to us.
Supported providers: Anthropic (Claude), OpenAI, Google Gemini.
Note that a ChatGPT Plus, Claude Pro, or Gemini app subscription is not API
access. You need a developer API key from the provider, billed separately.
There is also a built-in planner that contacts nothing at all. It
understands common request shapes — text replacement, styling, embeds,
refusals and the standard automation patterns — and runs on your own server.
Select it under Settings if you would rather nothing left the building; it
handles set phrasings rather than free-form description.
What is free
Everything except the AI itself. Every capability, the full approval
pipeline, simulation, verification, undo, history, scheduling, webhooks
and WooCommerce support are included with no cap on how many automations you
run. Nothing is held back for a paid tier that does not exist.
External services
errorHandle contacts an external service only when you have explicitly
chosen one. On first run it asks, and nothing is contacted until you answer.
The default answer is none: the built-in planner runs on your own server and
contacts nothing at all.
There are two ways to choose otherwise.
errorHandle hosted AI (optional)
If you choose “Use errorHandle AI”, the plugin uses errorHandle’s hosted
service at wp.errorhandle.com, which supplies ten free AI commands. You are
shown what is sent before you agree, and you have to press a button.
That service receives, at registration: your site’s address, and your
WordPress, PHP and plugin versions. It then asks your site to publish a
single-use token at one public URL, to prove the site is yours.
For each request it receives the text you typed and the site summary listed
below, and forwards them to Anthropic, which generates the plan.
It records how many commands you have used and approximate token counts. It
does not keep your requests, your content, your users or your IP address. If
you confirm an email address to unlock the remaining seven commands, it is
stored hashed and encrypted, and the confirmation email is sent through
Microsoft Graph.
Terms: https://errorhandle.com/wp-errorhandle-terms/
Privacy: https://errorhandle.com/wp-errorhandle-privacy/
Your own AI provider (optional)
If you connect your own Anthropic, OpenAI or Google API key, requests go
directly from your server to that provider. errorHandle is not involved and
receives nothing.
What a provider receives
Whichever you choose, the provider receives:
- the text of the request you typed
- the list of operations your site supports (identifiers, labels, descriptions
and input schemas — not your data) - a technical summary of your site: WordPress and PHP versions, active theme
name, whether WooCommerce or Elementor are active, counts of posts and pages,
public post type names, timezone, and currency code - the titles and IDs of a few pages that look relevant to your request
It does not receive post or page content, customer records, orders, user
accounts, email addresses, passwords, API keys, database contents, or anything
about your visitors.
Providers and their terms:
- Anthropic — api.anthropic.com —
Terms: https://www.anthropic.com/legal/consumer-terms —
Privacy: https://www.anthropic.com/legal/privacy - OpenAI — api.openai.com —
Terms: https://openai.com/policies/terms-of-use —
Privacy: https://openai.com/policies/privacy-policy - Google Gemini — generativelanguage.googleapis.com —
Terms: https://ai.google.dev/gemini-api/terms —
Privacy: https://policies.google.com/privacy
Separately, automations you build yourself may send HTTP requests to addresses
you specify (the “Send a webhook”, “Fetch a URL” and “Send data to a URL”
actions). Those destinations are yours, are shown in the preview before you
approve, and are never contacted unless an automation you activated does so.
The complete list of hosts this plugin can contact
Four, and no others:
- api.anthropic.com — only with your own Anthropic key
- api.openai.com — only with your own OpenAI key
- generativelanguage.googleapis.com — only with your own Google key
- wp.errorhandle.com — only after you choose errorHandle hosted AI
Plus any address you enter yourself in a webhook or fetch action.
Other hostnames do appear in the source, and none of them is ever contacted:
- Links shown for you to click — errorhandle.com, the providers’ own console
and legal pages, gnu.org for the licence. - A blocklist. 169.254.169.254 and the private IP ranges are compared against
and refused, so an automation cannot be pointed at cloud metadata or your
internal network. - A list of host preview, platform and development-tunnel suffixes, among them
wpengine.com, vercel.app, ngrok-free.app and trycloudflare.com. These are
string comparisons used to recognise that a site is a throwaway copy, so one
cannot claim a fresh free allowance by being redeployed at a new address.
errorHandle holds no credentials for these services, contains no tunnelling
code, and makes no request to any of them.
errorHandle does not phone home. There is no telemetry, no licence check,
no usage reporting, and no errorHandle server involved in the plugin’s
operation unless you chose hosted AI.
Privacy
Everything the plugin stores stays in your own WordPress database: your
requests and the plans they produced, execution history, applied changes and
their undo data, your automations, and your encrypted provider credentials.
What leaves the site depends on which AI you use, and it is worth being plain
about it.
Using your free errorHandle commands. Your site’s address is registered
with errorHandle so the ten commands can be counted, and the text of each
request is sent to errorHandle’s server, which forwards it to Anthropic.
errorHandle’s counting records how many commands and how many tokens — it does
not keep your requests, your page content, your users or your IP address. If
you confirm an email address to unlock the remaining seven, that address is
stored hashed and encrypted, and used only to recognise the same account
again.
Using your own provider key. Requests go straight from your server to that
provider. errorHandle is not in the path, receives nothing, and counts
nothing.
Using the built-in planner. Nothing leaves the site at all.
Execution logs are kept for 30 days by default and the retention period is
configurable, including “keep everything”. You can clear all run history from
Settings at any time.
Logs are redacted before they are written: stored credentials, and the known
key formats of each supported provider, are scrubbed out.
Provider API keys are encrypted at rest using AES-256-GCM with a key derived
from your WordPress security salts. A saved key is never shown again — only its
last four characters — and is never returned by any endpoint.
The plugin stores no information about your site’s visitors and registers no
personal-data exporter or eraser because it holds no personal data.
On uninstall, your data is kept by default so that removing and
reinstalling the plugin does not destroy your automations. To remove
everything, set the wpeh_delete_data_on_uninstall option to true before
deleting the plugin. Scheduled events and cached data are always cleared.
Screenshots
Describe what you want in plain English.
The plan, with exactly what will change and what leaves your site.
Test mode — a simulation that changes nothing and sends nothing.
Applied and independently verified.
Automations, saved switched off until you activate them.
History, with undo.
Settings — use the AI provider WordPress holds for you, bring your own key,
or stay offline.
