內容簡介
Digitizer Site Worker for Aura 是一款輕量級的 WordPress 外掛，透過 Aura 控制台實現遠端網站管理，提供安全的 REST API 端點來檢查網站健康狀態及執行更新。
【主要功能】
• 檢查網站健康狀態
• 遠端更新外掛
• 遠端更新佈景主題
• 遠端更新 WordPress 核心
• 批次更新翻譯
• 執行資料庫升級
外掛標籤
開發者團隊
原文外掛簡介
SiteAgent is the bridge between your WordPress sites and the Aura infrastructure dashboard — a unified control center for teams managing multiple WordPress sites alongside servers, CDN, and DNS.
Install this plugin on any WordPress site to unlock remote management capabilities directly from Aura — no SSH, no wp-admin juggling, no manual logins.
What You Can Do
Monitor site health — See WordPress version, PHP version, installed plugins & themes, database info, and disk usage in real time.
Update plugins, themes & core remotely — Push updates to any connected site from the Aura dashboard, no wp-admin login.
Safe batch updates with auto-rollback — Run chunked updates with health checks; if an update breaks the site, the plugin restores the previous version automatically.
Per-plugin rollback — Every update is zip-snapshotted first; restore any plugin to its last good state on demand.
Bulk translation & database upgrades — Update all language packs and run WordPress database migrations remotely.
One-click connect (magic link) — Connect a site to Aura straight from wp-admin — no manual token copy/paste.
AI-agent ready (MCP tools) — Exposes machine-readable tools (site context, safe plugin update, asset cleanup, vulnerability checks) for AI-driven management.
Zero frontend impact — The plugin only registers REST API endpoints. No scripts, no styles, no database queries on visitor-facing page loads.
How It Works
After activation, click Connect to Aura on the Settings → SiteAgent page for a one-click magic-link connection, or copy the Site Token shown once and paste it into your Aura dashboard manually. From that point, Aura communicates with your site over a signed, authenticated REST API to pull health data and push updates.
Security
Defence-in-depth protects every request:
WordPress Application Password — Standard WordPress auth with capability checks (manage_options / update_*). Only authorized administrators can trigger actions.
Hashed Site Token — A per-site token sent via the X-Aura-Token header. Only a SHA-256 hash is stored (never the raw token), compared timing-safely. Tokens from older versions migrate to a hash automatically.
Brute-force throttling — Repeated bad-token attempts from an IP are blocked.
Signed magic-link connect — The onboarding callback is HMAC-signed with a one-time secret and timestamp, so the token exchange can’t be hijacked or replayed.
IP / Domain allowlist (optional) — Restrict API access to your Aura instance, with Cloudflare and reverse-proxy header support.
You can rotate the token anytime from Settings → SiteAgent → Regenerate Token.
REST API Endpoints
Core endpoints under /wp-json/aura/v1/:
GET /status — Full site health report
GET /updates — Check available updates (core, plugins, themes, translations)
POST /update/core / /update/plugin / /update/theme / /update/translations — Apply updates
POST /update/database — Run WordPress database upgrades
POST /connect — Magic-link token exchange (public, HMAC-signed, 10-minute expiry)
Version 2 endpoints under /wp-json/aura/v2/:
GET /health — HTTP, PHP fatal, white-screen and DB connectivity checks
POST /update/batch — Chunked batch updates with auto-rollback on health failure
POST /rollback/{plugin} — Restore a plugin from its most recent backup
MCP tools under /wp-json/aura/mcp/:
POST /tools/list / POST /tools/execute — Enumerate and run AI-agent tools
GET /context — Full site context for AI decision-making
About Aura
Aura is a full-stack operations dashboard by Digitizer that brings servers, applications, DNS zones, and CDN pull zones from Cloudways, Hostinger VPS, Cloudflare, and Bunny.net into a single unified interface.
SiteAgent extends that reach into every WordPress installation — so you can manage your entire infrastructure, including WordPress sites, from one place.
Free to Use
The plugin is completely free and open source (GPLv2+). You need a free or paid Aura account to connect your sites. Sign up at my-aura.app.
Links
Aura Dashboard
Documentation
GitHub Repository
Digitizer
