=== Keyworth ===
Contributors: keyworth
Tags: seo, publishing, content, application passwords, rest api
Requires at least: 5.6
Tested up to: 6.7
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Connect your WordPress site to Keyworth in one click, without creating an Application Password by hand.

== Description ==

Keyworth (https://keyworth.co) researches keywords, writes SEO articles in your brand's voice and publishes them to your site on a schedule you set.

Connecting a site normally means generating an Application Password in your profile and copying three values into another tab. This plugin removes that step: press **Connect to Keyworth** and the plugin creates a dedicated Application Password named "Keyworth", hands it to Keyworth over a secure server-to-server request, and shows you which Keyworth project the site is linked to.

The plugin does not add a post type and does not publish anything itself. Keyworth publishes through the standard WordPress REST API, like any other REST client.

= What it does =

* Creates a single, clearly named Application Password on request.
* Shows connection status in WP admin: the linked Keyworth project and the last article published.
* Disconnect button that revokes the password immediately.
* Deactivating or uninstalling the plugin also revokes the password.

= Credential handling =

The Application Password is never placed in a URL and never appears in your browser history. The redirect to Keyworth carries only a short-lived, single-use code. Keyworth then collects the credential by calling back into this site over HTTPS, proving it holds a secret this site generated for that one handoff.

== External services ==

This plugin connects to Keyworth (https://keyworth.co), the service it integrates with.

* When you press "Connect to Keyworth", the plugin sends your site URL, your WordPress username and a one-time handoff identifier to https://keyworth.co/api/public/wp-connect/announce so that Keyworth can complete the connection.
* While connected, the settings screen requests publishing status from https://keyworth.co/api/public/wp-connect/status using a token issued during connection.
* When you disconnect, the plugin notifies https://keyworth.co/api/public/wp-connect/disconnect so the connection is not shown as live.

No data is sent unless you press Connect, and no site content is transmitted by this plugin.

Privacy policy: https://keyworth.co/privacy-policy

== Installation ==

1. Upload the plugin to `/wp-content/plugins/keyworth`, or install the zip through Plugins > Add New > Upload Plugin.
2. Activate it.
3. Go to Settings > Keyworth and press **Connect to Keyworth**.
4. Choose which Keyworth project this site belongs to.

== Frequently Asked Questions ==

= Does this plugin publish posts? =

No. It only handles the credential. Keyworth publishes through the standard WordPress REST API.

= What happens if I deactivate it? =

The Application Password named "Keyworth" is revoked, so Keyworth can no longer publish here.

= My site is multisite =

Connect each site in the network separately, from that site's own dashboard.

= Application Passwords are unavailable on my site =

They require HTTPS and can be disabled by a host or plugin. The settings screen explains what is blocking, and you can still connect manually from your Keyworth integrations page.

== Changelog ==

= 1.0.0 =
* First release: one-click connect, status display, disconnect, deactivation and uninstall cleanup.
