Learn PressBot

Free Version:

1. Download the free version from pressbot.io
2. Go to Plugins → Add New → Upload Plugin
3. Upload the zip and click Activate

Pro Version:

1. Purchase a Pro license from the Pro page
2. Download the zip from your purchase confirmation email
3. Go to Plugins → Add New → Upload Plugin
4. Upload the zip and activate
5. Enter your license key when prompted

PressBot uses a BYOK (Bring Your Own Key) model. You'll need at least one API key:

Paste your key(s) in PressBot → Settings → API Keys. Keys are encrypted with AES-256-CBC and stored securely in your database.

Customize your chatbot in PressBot → Settings:

• Bot Name — Give your assistant a custom name (e.g. "Luna", "Support Bot")
• Colors — Primary color, text color, and background. Match your brand.
• Theme — Light, dark, or auto (follows the visitor's system preference)
• Position — Bottom-left or bottom-right of the screen
• Welcome Message — The greeting visitors see when the widget opens
• Placeholder Text — Hint text in the input field
• Focus Mode — Restrict the chatbot to only answer questions relevant to your site. Prevents off-topic conversations and keeps the AI on-brand.

The knowledge base lets you provide business-specific information to the AI. Content you add here is included in every conversation's system prompt, so the chatbot can answer questions about:

• Your products, services, and pricing
• Business hours and contact information
• Return policies, FAQs, and common questions
• Any topic unique to your business

Go to PressBot → Knowledge Base to add or edit your content. Plain text works best — keep it concise and factual.

Protect your API budget with built-in rate limiting:

• Messages per session — Limit how many messages a single visitor can send
• Cooldown period — Time between allowed sessions

Configure in PressBot → Settings → Rate Limiting.

Explain CTAs are “Ask PressBot” buttons that appear on page sections, giving visitors AI-powered explanations of your content on demand. Instead of reading through dense pricing tables, technical specs, or policy pages, visitors click the button and get a clear, conversational explanation powered by your knowledge base.

Explain CTAs work alongside the chatbot — they open the chat widget with a pre-filled question about the section the visitor clicked. The AI uses the section’s content (plus any knowledge base context you provide) to generate a helpful, on-topic response.

Enable Explain CTAs in PressBot → Settings → Explain CTAs. Once enabled, any HTML element with the appropriate data attributes will display an “Ask PressBot” button.

No additional JavaScript or CSS is required — the chatbot frontend handles everything automatically.

Mark any HTML element as an explainable section using data attributes:

<section
  data-pressbot-explain="Pricing Plans"
  data-pressbot-context="We offer three tiers: Starter $29/mo, Pro $99/yr, Agency $399/yr"
  data-pressbot-kb="pricing-details"
>
  <h2>Pricing Plans</h2>
  <!-- your pricing table markup -->
</section>

Use the [pressbot_explain] shortcode to render an inline CTA pill anywhere in your content — posts, pages, or widgets.

[pressbot_explain title="Money-Back Guarantee" context="We offer a 30-day money-back guarantee on all plans" kb="refund-policy" class="my-custom-class"]

Trigger explanations programmatically using the global window.PressBot object:

// Trigger an explanation programmatically
window.PressBot.explain({
  title: 'Pricing Plans',
  context: 'We offer three tiers with annual billing...',
  kb: 'pricing-details'
});

// Widget control methods
PressBot.open();    // Open the chat widget
PressBot.close();   // Close the chat widget
PressBot.toggle();  // Toggle open/closed

Pro users can manage Explain CTAs through the admin agent using the manage_explain_section tool. Just describe what you want in natural language:

The agent handles adding data attributes to the appropriate elements, setting context, and linking knowledge base files.

Customize the Explain CTA appearance to match your brand:

• Hide PressBot Logo — Remove the PressBot branding from Explain CTA buttons
• Custom Icon URL — Replace the default icon with your own image or SVG

Configure in PressBot → Settings → White Label.

The Admin Agent is an AI assistant that lives in your WordPress dashboard. Instead of clicking through menus, you describe what you want in natural language and the agent executes it using 77 built-in tools.

Access it from PressBot → Admin Agent in your WordPress admin sidebar.

The agent respects WordPress user capabilities — it can only do what your user role allows. Destructive actions (deleting posts, bulk updates) require confirmation before executing.

The 77 tools are organized into 20 categories:

The agent can generate and describe images using Google's Gemini vision models. Requires a Gemini API key.

Bulk operations — Generate featured images or describe media for multiple items at once. The agent reports real-time progress as it processes each item.

The admin agent can search the web to inform its responses. This is useful when the agent needs up-to-date information — competitor research, current trends, or fact-checking.

The Content Pipeline is a multi-agent system that creates complete, publish-ready blog posts from a single prompt. Instead of one AI call, it orchestrates up to 7 specialized agents that each handle one step of the content creation process.

Trigger it by asking the admin agent to write content:

The agent detects this is a content creation request and automatically runs the full pipeline, reporting progress at each stage via real-time status updates.

Each stage runs a dedicated AI agent with a focused system prompt. Optional stages can be toggled in settings.

Each pipeline stage can use a different AI model, letting you balance cost and quality. Configure in PressBot → Settings → Pipeline Models.

Cost tip: Use cheaper models (Haiku, Gemini Flash) for research and categorization stages. Save quality models (Sonnet) for the writer and critic where output quality matters most.

WooCommerce integration is automatic. When WooCommerce is active on your site, PressBot detects it and adds 10 dedicated store tools to the admin agent. No extra configuration needed.

The integration works with both legacy storage and HPOS (High-Performance Order Storage).

Ask the agent about your store performance:

The agent returns real-time data: revenue totals, order counts, average order value, and top-selling products.

Create and manage products through conversation:

• List and search products
• Create new products with title, price, description, and stock
• Update existing product details
• View product details and inventory status

Manage your order workflow:

• List recent orders with status and totals
• View order details (items, customer, shipping)
• Update order status (processing, completed, on-hold)

The Telegram bot lets you manage your WordPress site from your phone. All 77 admin tools work via text messages — content management, plugins, WooCommerce, security audits, and more. No browser needed.

Beyond tools, you can upload photos directly to your media library, create and publish content through conversation, and receive security alerts for critical events.

Setting up the Telegram bot takes about 2 minutes:

1. Create your bot — Open Telegram and message @BotFather. Send /newbot and follow the prompts to name your bot.
2. Copy the bot token — BotFather will give you an API token. Copy it.
3. Paste in PressBot — Go to PressBot → Settings → Telegram and paste the bot token.
4. Add your Telegram user ID — Enter your numeric Telegram user ID (message @userinfobot on Telegram to find it). Only whitelisted IDs can use the bot.
5. Register the webhook — Click "Register Webhook" to connect your bot to your site. Done!

Everything the admin agent can do in the browser works in Telegram too. Just text your bot:

The bot uses the same multi-agent pipeline as the browser admin agent, with full tool selection and execution.

Send a photo from your camera roll and it goes straight to your WordPress media library. Add a caption to give the bot instructions:

Photos are uploaded at full resolution. The bot confirms the upload with a link to the file in your media library.

Create and publish full blog posts through conversation. The same 8-stage content pipeline runs via Telegram:

The bot runs the full pipeline — research, strategy, writing, criticism, image generation, categorization, and publishing — then sends you the live URL.

The bot sends you 7 types of security and monitoring alerts:

Real-time Alerts

• Brute force detection — Alerts when multiple failed login attempts are detected within a short window
• New user registration — Immediate notification when a new user account is created

Daily Digest

• Plugin updates — Summary of available plugin updates
• Failed logins — Count and details of failed login attempts
• Security audit changes — Changes in security posture since last check
• New users — Summary of users registered that day
• PHP errors — Critical errors from the WordPress debug log

Configure which alerts you receive in PressBot → Settings → Telegram → Alerts.

PressBot Shield is an AI-powered login protection system. It monitors every login attempt, automatically locks out IPs that exceed configurable failure thresholds, and sends AI-analyzed threat alerts to Telegram with one-tap remediation buttons.

All login data is stored in a dedicated database table with 30-day auto-cleanup. IP detection is Cloudflare-aware, correctly identifying attackers even behind proxy services.

1. Login attempt recorded — Every failed and successful login is stored in the database with IP address, username, user agent, and timestamp.
2. Threshold check — When failures from a single IP exceed your configured threshold (default: 5 in 15 minutes), the IP is automatically locked out.
3. Lockout enforced — Locked IPs receive a “Too many failed attempts” error on the WordPress login page. The lockout expires after your configured duration (default: 30 minutes).
4. AI analysis — When a burst is detected, PressBot uses the cheapest available AI model to analyze the attack pattern, threat level, and what the attacker likely knows.
5. Telegram alert — You receive the AI analysis in Telegram with inline action buttons: Block IP (30 min), Block IP (24 hrs), View Details, or Dismiss.

Configure PressBot Shield in PressBot → Settings → PressBot Shield:

When enabled, PressBot Shield uses the cheapest available AI model to analyze security events:

• Brute force alerts — AI evaluates attack pattern, threat level, what the attacker knows, and recommends action
• Daily digest — AI summarizes 24h of login data with overall security posture and recommendations

You control the AI level:

• All reports — AI enhances all digest sections
• Security alerts only — AI only analyzes brute force and login data (default)
• None — Pure data, no AI. You still get alerts and lockouts, just without the analysis

PressBot Shield sends alerts to your Telegram bot with inline action buttons. When a brute force attack is detected, you’ll receive:

Tapping a button instantly executes the action — no browser needed. Requires Telegram Bot to be configured and webhook registered.

PressBot Shield uses a Cloudflare-aware detection chain to identify the real attacker IP:

1. CF-Connecting-IP — Set by Cloudflare with the true client IP
2. X-Forwarded-For — First IP in the chain (used by most reverse proxies)
3. REMOTE_ADDR — Direct connection IP (fallback)

IPv6 addresses are fully supported.

PressBot can connect to your Google Analytics 4 property and surface real traffic data directly in the Analytics dashboard — and make it queryable through the admin agent. Ask “How’s the site doing?” and get a composite report with sessions, top pages, traffic sources, Shield security events, and chatbot usage in one reply.

The integration uses the GA4 Data API with a service account — no OAuth redirect flow, no browser pop-ups. Credentials are encrypted with AES-256-CBC before being stored. All data is fetched server-to-server and never passes through PressBot’s infrastructure.

1. Create a Google Cloud project — Go to console.cloud.google.com and create a new project (or use an existing one).
2. Enable the GA4 Data API — In your project, navigate to APIs & Services → Library and enable the Google Analytics Data API.
3. Create a service account — Go to APIs & Services → Credentials → Create Credentials → Service Account. Give it a name, then create a JSON key and download it.
4. Grant access in GA4 — In your Google Analytics property, go to Admin → Account Access Management (or Property Access Management) and add the service account email with Viewer role.
5. Connect in PressBot — Go to PressBot → Settings → Google Analytics 4. Enter your GA4 Property ID (format: 123456789) and paste the full JSON key contents into the service account field. Click Save & Connect.

Once connected, the PressBot → Analytics page gains a Google Analytics panel showing:

Dashboard data is cached for 30 minutes per date range to avoid hitting GA4 API limits. Date range options: 7, 14, 28, and 90 days.

Two tools are available to the admin agent when GA4 is connected:

• Service account JSON is encrypted with AES-256-CBC before being stored in the WordPress database.
• The credentials are decrypted in memory only when making a GA4 API request — never exposed in the admin UI or REST API responses.
• All requests go directly from your server to Google’s APIs. PressBot’s infrastructure is never involved.
• Access tokens are cached as WordPress transients with a 1-hour TTL and automatically refreshed.
• To disconnect, go to PressBot → Settings → Google Analytics 4 and click Disconnect. This clears the stored credentials and invalidates the cached token.

The MCP Server exposes all 77 admin tools to external AI clients via the Model Context Protocol. Connect Claude Code, Cursor, Windsurf, or any MCP-compatible client to your WordPress site and manage it from your IDE.

PressBot uses Streamable HTTP transport (JSON-RPC 2.0) with WordPress Application Password authentication. No SSH tunnels, no custom API keys — just standard WordPress auth over HTTPS.

Free users get 8 read-only tools (get_site_info, get_posts, get_plugins, get_comments, get_conversations, search_knowledge, and booking availability). Pro unlocks all 77 tools.

1. Enable MCP — Go to PressBot → Settings → MCP Server and toggle it on.
2. Generate an Application Password — Go to Users → Profile, scroll to Application Passwords, and create one named "MCP". Copy the password.
3. Copy your config — The MCP settings panel shows a pre-generated JSON config with your site URL. Copy it.
4. Paste into your client — Add the config to your AI client's MCP settings file (e.g., ~/.claude/mcp_servers.json for Claude Code).
5. Test — Click the "Test Connection" button in PressBot settings, or run tools/list from your client.

The MCP endpoint is POST /wp-json/pressbot/v1/mcp. All requests use JSON-RPC 2.0:

{
  "jsonrpc": "2.0",
  "method": "tools/list",
  "id": 1
}

Available JSON-RPC methods:

Tools with destructive actions include annotations.destructiveHint: true so clients can prompt for confirmation.

Knowledge base entries are exposed as MCP resources with URIs like pressbot://kb/{slug}. AI clients can read these before taking action, giving them context about your site, policies, and workflows.

Resources are read-only and automatically reflect your current knowledge base content.

PressBot dispatches CustomEvent events on the document object throughout the chatbot lifecycle. Use these to integrate analytics, trigger custom UI, or build workflows around visitor interactions.

Events are always active — no configuration needed. They fire on both free and Pro versions.

Every event includes a timestamp property in its detail object (Date.now() value).

PressBot supports 7 models across two providers. You can use different models for the chatbot and admin agent.

Pro users can select different models per agent — for example, use Haiku for the visitor chatbot (fast, cheap) and Sonnet for the admin agent (higher quality). The content pipeline also lets you choose a model for each stage individually.

PressBot takes security seriously:

• API Key Encryption — Keys are encrypted with AES-256-CBC before storage. Never stored in plaintext.
• Direct API Calls — Your server talks directly to AI providers. Nothing passes through our servers.
• Capability Checks — Every tool execution verifies WordPress user capabilities.
• Self-Protection — The agent cannot deactivate or delete PressBot itself.
• Option Whitelist — Only safe settings can be read/updated. Critical options (site URL, admin email, user registration) are blocked.
• Cron Safety — Only pressbot_-prefixed hooks can be scheduled.
• Confirmation Dialogs — Destructive actions require explicit user approval.
• Security Audit — Ask “Is my site secure?” to run a 12-point check: WordPress/PHP versions, SSL, debug mode, file editing, table prefix, admin usernames, XML-RPC, outdated plugins, spam, admin accounts, and auto-update settings. Each finding is rated critical, warning, or good.