Shake Connect Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
Shake Connect is the site-side companion to the WPShake dashboard at wpshake.com. Install it on each WordPress site you want to monitor, then add the site to your WPShake account using the connection token shown on the plugin’s settings page. The dashboard then runs daily checks across every connected site without you logging into each one.
What Shake Connect adds to this site
- A bearer-token-authenticated REST API under
/wp-json/wpshake/v1/*that the WPShake dashboard calls to read site state. - Endpoints for: plugin and theme inventory with available updates, core info, WP checksums, database health, recent WooCommerce orders if WooCommerce is installed, recent PHP errors from
WP_DEBUG_LOG, backup-plugin detection (UpdraftPlus, BlogVault, BackWPup, Solid Backups, WPvivid, Duplicator), activity log integration (reads the WP Activity Log plugin’s table when present), a built-in malware signature scanner, and a broken-link checker. - Maintenance endpoints scoped to safe operations: cache flush across popular caching plugins, run-due WP-Cron, expired-transient cleanup, permalinks flush.
- A WP-CLI subcommand
wp wpshakefor token rotation and status checks.
What Shake Connect does NOT do
- It does not auto-update plugins, themes, or WordPress core. Update commands are issued from the dashboard side as separate releases of this connector. This release is read-only plus safe maintenance only.
- It does not collect personal information or analytics. The dashboard reads your site’s existing data on demand.
- It does not communicate with any third party except the WPShake dashboard configured on the plugin’s settings page, and only when the dashboard calls this site’s REST endpoints with a valid bearer token.
How the connection works
- Install and activate Shake Connect.
- Open Settings Shake Connect in the WordPress admin to generate a connection token. The token is shown once.
- Sign up at wpshake.com, click “Add a site”, paste the token and your site URL.
- The dashboard performs an initial handshake and pulls site state.
The token is stored as a SHA-256 hash on this site. The dashboard sends the plain token in an Authorization: Bearer header on every request. Every authenticated endpoint validates the header before doing anything.
Built for agencies
If you maintain more than a handful of WordPress sites, you already know the work. Shake Connect is the receiver for an agent that handles the daily checks across your fleet: backup verification, plugin and theme update visibility, vulnerability scanning, performance probes, PHP error monitoring, broken link checks, and per-site recommendations on what to update and what to hold.
The WPShake dashboard is a separate paid service. This connector plugin is free and open source under GPL.
Multisite
Shake Connect supports WordPress multisite. Network-activate the plugin and the connection token is stored at the network level so every subsite shares the same credentials. Enumerate subsites via /network/sites and pass ?blog_id=N to per-site read endpoints (for example /site/info?blog_id=3 or /plugins?blog_id=3) to inspect each subsite. Without blog_id, requests run against the main site. Enumeration is capped at 500 subsites per call.
External services
This plugin connects to the WPShake dashboard at https://wpshake.com when the dashboard initiates a request to this site’s REST API.
The dashboard sends an Authorization: Bearer <token> header on every request. This site does not initiate outbound calls to wpshake.com. No site data leaves the site except in response to authenticated dashboard requests, and only the data the relevant endpoint returns.
- Service: WPShake dashboard
- Provided by: WPShake (Jean Galea / RebelCode)
- Privacy policy: https://wpshake.com/privacy
- Terms of service: https://wpshake.com/terms
- When data is exchanged: only when the dashboard calls one of this plugin’s REST endpoints with a valid bearer token.
- What data is exchanged: the response payload of the called endpoint. For example,
/pluginsreturns the list of installed plugins with versions;/php-errors/recentreturns recent error log lines;/orders/recentreturns the most recent WooCommerce order IDs and statuses when WooCommerce is active.
The plugin’s settings page contains a clear disclosure of this relationship before any token is generated.
Screenshots
No screenshots provided
