{"id":301757,"date":"2026-07-07T07:11:11","date_gmt":"2026-07-07T07:11:11","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/sproutos\/"},"modified":"2026-07-07T07:10:39","modified_gmt":"2026-07-07T07:10:39","slug":"sproutos","status":"publish","type":"plugin","link":"https:\/\/test.wordpress.org\/plugins\/sproutos\/","author":15954481,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"0.0.8","stable_tag":"0.0.8","tested":"7.0","requires":"6.9","requires_php":"8.0","requires_plugins":null,"header_name":"SproutOS","header_author":"Posimyth","header_description":"AI-powered WordPress workflow tools with admin controls, analytics, notifications, and safer advanced site management.","assets_banners_color":"9c8b98","last_updated":"2026-07-07 07:10:39","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/sproutos.ai","header_author_uri":"https:\/\/posimyth.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":35,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"0.0.8":{"tag":"0.0.8","author":"posimyththemes","date":"2026-07-07 07:10:39"}},"upgrade_notice":{"0.0.2":"<p>Adds Capabilities Profile selector (default: Minimal). Retires approval-queue and confirmation-token systems in favour of snapshot-based recovery. Patches two path-traversal hardening issues. Visit Settings \u2192 Safety to switch to Standard or Full profile.<\/p>","0.0.1":"<p>Initial release of SproutOS with AI-powered workflow tools, admin controls, analytics, notifications, and safety-focused settings.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3598577,"resolution":"128x128","location":"assets","locale":"","width":257,"height":257},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3598577,"resolution":"256x256","location":"assets","locale":"","width":129,"height":129}},"assets_banners":{"banner-1544x500.jpg":{"filename":"banner-1544x500.jpg","revision":3598577,"resolution":"1544x500","location":"assets","locale":"","width":1550,"height":500},"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":3598577,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.0.8"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[2353,1320,569,242115,8197],"plugin_category":[],"plugin_contributors":[153210,191589],"plugin_business_model":[],"class_list":["post-301757","plugin","type-plugin","status-publish","hentry","plugin_tags-ai","plugin_tags-assistant","plugin_tags-automation","plugin_tags-mcp","plugin_tags-workflow","plugin_contributors-posimyththemes","plugin_contributors-sagarpatel124","plugin_committers-posimyththemes","plugin_committers-sandip111","plugin_support_reps-divyangposimyth","plugin_support_reps-mohitahuja"],"banners":{"banner":"https:\/\/ps.w.org\/sproutos\/assets\/banner-772x250.jpg?rev=3598577","banner_2x":"https:\/\/ps.w.org\/sproutos\/assets\/banner-1544x500.jpg?rev=3598577","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/sproutos\/assets\/icon-128x128.png?rev=3598577","icon_2x":"https:\/\/ps.w.org\/sproutos\/assets\/icon-256x256.png?rev=3598577","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>SproutOS is a modern WordPress plugin designed to help site owners, agencies, and developers work faster with AI-powered tools, flexible admin controls, and workflow-focused features.<\/p>\n\n<p>It helps streamline website management, improve automation, and organize advanced site operations from a dedicated admin experience inside WordPress.<\/p>\n\n<p>With SproutOS, you can configure smart site tools, manage feature access, monitor activity, set up notifications, and keep better control over how advanced functionality is used on your website.<\/p>\n\n<p>The plugin does not require any external service to run its core admin experience. External requests are only made when an administrator explicitly uses an optional feature: webhook notifications (to a user-configured URL), stock image search (Openverse API), the Map widget (which embeds Google Maps), or importing media from a user-supplied URL. Each of these is documented in the External Services section below.<\/p>\n\n<h4>Why Use SproutOS?<\/h4>\n\n<ul>\n<li>Improve WordPress workflows with AI-powered tools and automation support.<\/li>\n<li>Control which advanced features are available in your site setup.<\/li>\n<li>Manage site activity with analytics and logging controls.<\/li>\n<li>Receive webhook and email notifications for selected events.<\/li>\n<li>Add safety-focused controls for advanced operations.<\/li>\n<\/ul>\n\n<h4>Main Features<\/h4>\n\n<ul>\n<li>AI-powered workflow support for advanced WordPress use cases.<\/li>\n<li>Admin dashboard for connection settings, feature controls, analytics, and privacy options.<\/li>\n<li>Enable or disable feature groups based on your workflow.<\/li>\n<li>Support for custom advanced tools and controlled admin operations.<\/li>\n<li>Runtime protection for safer handling of advanced features.<\/li>\n<li>Activity tracking for usage, sessions, and related events.<\/li>\n<li>Webhook notifications for external monitoring and automation.<\/li>\n<li>Data-sharing controls for environment details sent to AI clients.<\/li>\n<\/ul>\n\n<h4>External Services<\/h4>\n\n<p>This plugin connects to the following external services:<\/p>\n\n<p><strong>1. Openverse (stock image search)<\/strong>\nWhen an administrator uses the stock image search feature, this plugin sends a search query to the Openverse API to retrieve publicly licensed images.\n* Service: Openverse, operated by the WordPress Foundation.\n* Data sent: Search keywords and pagination parameters (e.g. search query, page number, results per page). No personal user data is transmitted.\n* When: Only when an administrator explicitly triggers a stock image search from the WordPress admin area.\n* API endpoint: https:\/\/api.openverse.engineering\/v1\/images\/\n* Terms of Service: https:\/\/docs.openverse.org\/terms_of_service.html\n* Privacy Policy: https:\/\/wordpress.org\/about\/privacy\/<\/p>\n\n<p><strong>2. Webhook notifications (optional, user-configured)<\/strong>\nIf an administrator enables webhook notifications and configures a webhook URL, this plugin sends event data to that URL. The destination is entirely controlled by the site administrator \u2014 SproutOS does not operate or own any fixed endpoint.\n* Service: Any HTTP endpoint configured by the site administrator (e.g. Zapier, Slack, a custom server). SproutOS does not provide or control this endpoint.\n* Data sent: A JSON payload containing: event type (<code>ability_executed<\/code>), ability name, execution status, session ID, WordPress username of the executing user, timestamp, site URL, and site name.\n* When: Only when an MCP ability is executed AND webhook notifications are enabled AND a webhook URL has been configured by the administrator. Disabled by default.\n* The administrator is solely responsible for reviewing the privacy policy and terms of service of the third-party endpoint they configure.\n* No data is sent to any SproutOS-operated server via this feature.<\/p>\n\n<p><strong>3. Google Maps (Map widget embed)<\/strong>\nWhen an administrator adds a Map widget to a page, the plugin embeds a Google Maps frame so the rendered page displays the requested location. The map is loaded by the visitor's browser from Google.\n* Service: Google Maps, operated by Google LLC.\n* Data sent: The address or latitude\/longitude entered by the administrator, plus the visitor's browser request data (e.g. IP address) sent directly to Google when the embedded map loads.\n* When: Only when a Map widget has been added to a page, and only on the front-end pages where that widget appears.\n* Terms of Service: https:\/\/cloud.google.com\/maps-platform\/terms\n* Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n<p><strong>4. Remote media import (administrator-supplied URLs)<\/strong>\nThe stock-image sideload and SVG-import features fetch a file from a URL that the administrator explicitly provides, then store it in the Media Library. No fixed third-party service is involved \u2014 the destination is whatever URL the administrator enters.\n* Data sent: A standard HTTP GET request to the administrator-supplied URL. No personal user data is transmitted.\n* When: Only when an administrator explicitly triggers an image sideload or SVG import with a URL.<\/p>\n\n<h4>Privacy<\/h4>\n\n<ul>\n<li>Analytics and logging settings are configurable by the site administrator.<\/li>\n<li>No personal data is sent to any external service by default.<\/li>\n<li>Webhook delivery is optional and disabled by default.<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>sprout-os<\/code> plugin folder to the <code>\/wp-content\/plugins\/<\/code> directory, or install the plugin through the WordPress admin plugin installer.<\/li>\n<li>Activate <code>SproutOS<\/code> from the <code>Plugins<\/code> screen in WordPress.<\/li>\n<li>Open the <code>SproutOS<\/code> menu in the WordPress admin area.<\/li>\n<li>Review the available settings and configure the features you want to use.<\/li>\n<li>Enable only the modules or tools required for your workflow.<\/li>\n<li>Configure analytics, notifications, and related controls based on your site needs.<\/li>\n<li>Test the enabled features before using them on a live website.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20does%20sproutos%20do%3F\"><h3>What does SproutOS do?<\/h3><\/dt>\n<dd><p>SproutOS helps improve WordPress workflows with AI-powered tools, automation support, admin controls, analytics, and flexible feature management.<\/p><\/dd>\n<dt id=\"what%20is%20mcp%3F\"><h3>What is MCP?<\/h3><\/dt>\n<dd><p>MCP stands for Model Context Protocol. SproutOS supports modern AI-connected workflows, but the plugin is also designed around practical WordPress management, controls, and automation features.<\/p><\/dd>\n<dt id=\"who%20is%20this%20plugin%20for%3F\"><h3>Who is this plugin for?<\/h3><\/dt>\n<dd><p>This plugin is useful for agencies, developers, and advanced WordPress users who want more control, automation, and modern workflow tools inside WordPress.<\/p><\/dd>\n<dt id=\"can%20i%20control%20which%20features%20are%20enabled%3F\"><h3>Can I control which features are enabled?<\/h3><\/dt>\n<dd><p>Yes. SproutOS includes module-based controls so you can enable or disable feature groups from the admin interface.<\/p><\/dd>\n<dt id=\"does%20sproutos%20include%20advanced%20developer%20tools%3F\"><h3>Does SproutOS include advanced developer tools?<\/h3><\/dt>\n<dd><p>Yes. SproutOS includes support for advanced workflows and controlled custom tooling for users who need deeper flexibility.<\/p><\/dd>\n<dt id=\"does%20sproutos%20include%20analytics%20or%20logging%3F\"><h3>Does SproutOS include analytics or logging?<\/h3><\/dt>\n<dd><p>Yes. The plugin includes analytics and activity tracking features so you can monitor feature usage, calls, errors, and related events.<\/p><\/dd>\n<dt id=\"can%20i%20send%20webhook%20notifications%3F\"><h3>Can I send webhook notifications?<\/h3><\/dt>\n<dd><p>Yes. SproutOS includes webhook notification settings so you can send selected events to supported external endpoints for monitoring or automation.<\/p><\/dd>\n<dt id=\"does%20this%20plugin%20contact%20external%20services%20by%20default%3F\"><h3>Does this plugin contact external services by default?<\/h3><\/dt>\n<dd><p>No. SproutOS does not require an external service for its core features. Optional external requests are only made if an administrator enables webhook notifications and configures a webhook URL.<\/p><\/dd>\n<dt id=\"is%20sproutos%20safe%20for%20live%20websites%3F\"><h3>Is SproutOS safe for live websites?<\/h3><\/dt>\n<dd><p>SproutOS is designed with admin controls and safety-focused settings, but you should still enable only the features you need and test advanced options carefully before using them on a live website.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>0.0.8<\/h4>\n\n<ul>\n<li>Update : Removed theme file read and list abilities.<\/li>\n<li>Improvement : Reduced the filesystem surface further.<\/li>\n<\/ul>\n\n<h4>0.0.7<\/h4>\n\n<ul>\n<li>Improvement : Documented all external services (Openverse, Google Maps, webhook, remote media import) in the readme.<\/li>\n<li>Improvement : Removed unused development files and build artifacts from the package.<\/li>\n<li>Fixed : Additional security hardening and cleanup.<\/li>\n<\/ul>\n\n<h4>0.0.6<\/h4>\n\n<ul>\n<li>Improvement : Reduced the plugin surface to read-only and standard content operations.<\/li>\n<li>Fixed : Security-related hardening and bug fixes.<\/li>\n<li>Improvement : Performance improvements and code optimizations.<\/li>\n<\/ul>\n\n<h4>0.0.5<\/h4>\n\n<ul>\n<li>Fixed : Documented external services and added Terms\/Privacy links in the readme.<\/li>\n<li>Improvement : Switched filesystem operations to the WordPress Filesystem API.<\/li>\n<li>Fixed : Added capability checks across content abilities.<\/li>\n<\/ul>\n\n<h4>0.0.4<\/h4>\n\n<ul>\n<li>Fixed : Hardened request handling and input sanitization.<\/li>\n<li>Improvement : Renamed bundled library globals to plugin-prefixed equivalents.<\/li>\n<\/ul>\n\n<h4>0.0.3<\/h4>\n\n<ul>\n<li>Improvement : Reorganized admin settings into a cleaner interface.<\/li>\n<li>Improvement : Improved the way advanced tools are handled for users.<\/li>\n<\/ul>\n\n<h4>0.0.2<\/h4>\n\n<ul>\n<li>Improvement : Added a capability profile selector to control how many tools are exposed to MCP clients.<\/li>\n<li>Improvement : Added discovery and inspection bridge tools for light profiles.<\/li>\n<li>Improvement : Module gating so integrations register only when the related plugin is active.<\/li>\n<\/ul>\n\n<h4>0.0.1<\/h4>\n\n<ul>\n<li>Initial public release.<\/li>\n<li>Added WordPress admin management screens and workflow controls.<\/li>\n<li>Added AI-powered feature controls and module settings.<\/li>\n<li>Added analytics, webhook notifications, and activity controls.<\/li>\n<\/ul>","raw_excerpt":"Connect WordPress with AI-powered site tools, admin controls, automation features, analytics, and optional webhook integrations.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/301757","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=301757"}],"author":[{"embeddable":true,"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/posimyththemes"}],"wp:attachment":[{"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=301757"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=301757"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=301757"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=301757"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=301757"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/test.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=301757"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}