Superdav AI Agent gives your WordPress dashboard a capable AI coworker. Ask for an outcome in plain language and the agent can use your site’s available WordPress abilities to plan, act, and report back.
It is designed for WordPress 7.0’s AI provider ecosystem. Connect an AI provider plugin for OpenAI, Anthropic, Google Gemini, a local model, or another compatible service, choose your model, and start working from inside WordPress.
Instead of being just another chatbot, Superdav AI Agent can use WordPress abilities: the safe actions exposed by WordPress and installed plugins. As your site gains more abilities, the agent gains more useful things it can do.
Depending on the abilities available on your site, you can ask Superdav AI Agent to:
Try prompts like these:
Superdav AI Agent uses the WordPress AI provider system. Install and configure a compatible provider connector, then choose the model that fits your budget and workflow. The plugin itself does not mark up provider costs or require a separate subscription.
WordPress abilities let plugins describe what actions are available on a site. Superdav AI Agent can discover those actions and decide which ones help complete your request. That means the agent can become more useful as WordPress core and your installed plugins expose more capabilities.
The agent is designed to ask before risky actions. You can set tools to auto-run, require confirmation, or stay disabled. Role-based settings help you decide which WordPress users can use the agent and which abilities are available to them.
You bring your own provider account and API key. Usage goes directly to the provider you configure, and the plugin’s usage dashboard helps you understand token counts and estimated cost.
This plugin connects to third-party services to provide AI, search, analytics, stock-image, plugin-management, and user-configured integration capabilities. Each service below is optional and is only contacted when you configure the relevant API key, URL, or feature; ask the agent to perform an action that requires it; or enable a scheduled feature. No data is sent to any of these services on plugin activation or ordinary admin page load.
These are contacted only when you configure the corresponding connector in Settings > AI Credentials and the agent generates a response. Each request sends the conversation messages, system prompt, attached files (if any), and tool definitions to the chosen provider so it can produce a reply.
OpenAI (api.openai.com) — Provides AI chat completions when using OpenAI models. Sends the conversation context and your user queries. Terms: https://openai.com/policies/terms-of-use/ Privacy: https://openai.com/policies/privacy-policy/
Anthropic (api.anthropic.com) — Provides AI chat completions when using Claude models. Sends the conversation context and your user queries. Terms: https://www.anthropic.com/legal/consumer-terms Privacy: https://www.anthropic.com/legal/privacy
Google AI / Gemini (generativelanguage.googleapis.com) — Provides AI chat completions when using Gemini models. Sends the conversation context and your user queries. Terms: https://policies.google.com/terms Privacy: https://policies.google.com/privacy
Other OpenAI-compatible providers (via third-party connector plugins). If you install a separate WordPress connector plugin for any other AI provider, Superdav AI Agent will use that connector to send the conversation context to whichever endpoint the connector is configured for. Superdav AI Agent itself does not ship a list of those provider hostnames and does not initiate requests to any provider that does not have a connector installed and configured on your site. Please consult the connector plugin’s own documentation and privacy policy for the data-handling terms of that provider.
The internet-search ability is used when you or the agent explicitly run a web search. The first configured provider wins. Only your search query is sent — no WordPress site data, user data, or conversation history is transmitted.
Tavily Search API (api.tavily.com) — Web search results for the agent. Used only when a Tavily API key is configured in Settings > Internet Search. Sends the search query only. Terms: https://tavily.com/terms Privacy: https://tavily.com/privacy
Brave Search API (api.search.brave.com) — Web search results for the agent. Used only when a Brave Search API key is configured in Settings > Internet Search. Sends the search query only. Terms: https://brave.com/terms-of-use/ Privacy: https://brave.com/privacy/browser/
DuckDuckGo Instant Answer API (api.duckduckgo.com) — Free fallback web search used when no Tavily or Brave key is configured. Sends the search query only; no API key is required. Terms: https://duckduckgo.com/terms Privacy: https://duckduckgo.com/privacy
WordPress.org Plugin Directory (api.wordpress.org and downloads.wordpress.org) — Provides plugin search, plugin metadata, and plugin ZIP downloads when you ask the agent to search for or install a WordPress.org-hosted plugin by slug. The request sends the search keyword or plugin slug, requested result count, and normal HTTP request metadata. If installation is confirmed, WordPress downloads the plugin ZIP from WordPress.org. It does not send conversation history, API keys, or plugin settings. Terms / directory guidelines: https://developer.wordpress.org/plugins/wordpress-org/detailed-plugin-guidelines/ Privacy: https://wordpress.org/about/privacy/
Admin-supplied skill manifest URLs — If you configure skill_manifest_url, the plugin can fetch that HTTPS JSON manifest when you manually check for skill updates, when a skill lookup needs a remote manifest entry, or by WP-Cron when skill auto-update is enabled. The request sends the manifest URL path, an Accept: application/json header, conditional cache headers such as If-None-Match / If-Modified-Since when available, and normal HTTP request metadata. The host is chosen by the site administrator, so the applicable terms and privacy policy are those of the configured manifest provider.
These are contacted only when you request a stock image via the image-generation ability. Each request sends image dimensions and the search keyword you supply — no site data, user data, or conversation history is transmitted.
Openverse (api.openverse.org) — CC0 / openly-licensed image search hosted by the WordPress Foundation. Used only when an image-search request is made. Sends the search keyword and requested dimensions. No API key required. Terms: https://docs.openverse.org/terms_of_service.html Privacy: https://wordpress.org/about/privacy/
Pixabay (pixabay.com) — Free stock-image service. Used only when a Pixabay API key is configured and an image-search request is made. Sends the search keyword, requested dimensions, and your API key. Terms: https://pixabay.com/service/terms/ Privacy: https://pixabay.com/service/privacy/
Google Analytics Data API (analyticsdata.googleapis.com and oauth2.googleapis.com) — Reads traffic, top-page, and realtime statistics from your own Google Analytics 4 property when you ask the agent for analytics insights. Used only when you upload a Google service-account JSON key in Settings > Analytics and explicitly request a report. Sends an OAuth token request containing the service-account JWT, then sends the GA4 property ID and the date range / metrics you requested, authenticated with your service-account credentials. The plugin reads from your own GA property; it does not send any WordPress site data to Google. Google APIs Terms: https://developers.google.com/terms Privacy: https://policies.google.com/privacy Google Analytics terms: https://marketingplatform.google.com/about/analytics/terms/us/
Google Search Console API (searchconsole.googleapis.com and oauth2.googleapis.com) — Reads query, page, country, device, click, impression, CTR, and average-position data from your own Google Search Console property when you ask the agent for Search Console / SEO insights. Used only when you configure Google Search Console credentials and explicitly request a GSC report. Sends an OAuth token request containing the service-account JWT or uses your stored OAuth access token, then sends the Search Console property URL, date range, dimensions, filters, and row limit you requested. The plugin reads from your own Search Console property; it does not send WordPress user records, conversation history, API keys, or plugin settings to Google. Google APIs Terms: https://developers.google.com/terms Privacy: https://policies.google.com/privacy
Custom HTTP tools and webhooks — Site administrators can create HTTP tools that call any external API URL they configure. The disabled example tools include an editable placeholder weather-style URL and a Zapier webhook URL (hooks.zapier.com); they are not contacted unless an administrator enables the tool and the agent runs it. When an HTTP tool runs, the plugin sends the configured URL path, method, headers, placeholder-substituted input values, and request body configured for that tool. Terms and privacy depend on the service configured by the administrator. Zapier Terms: https://zapier.com/tos Zapier Privacy: https://zapier.com/privacy
User-requested URL fetch, site scrape, media import, and download URLs — Tools such as URL metadata fetches, SEO URL audits, existing-site scrape, upload-media-from-url, generated-image URL import, plugin-directory-install, and approved URL requests contact the exact URL you provide or approve. These requests are made only after a user or administrator asks the agent to fetch, scrape, download, import, install from, or call that URL. The target site may receive the requested URL path, query string, normal HTTP request metadata, and a plugin/WordPress user-agent string. The plugin does not send unrelated WordPress site data, user records, conversation history, API keys, or plugin settings to arbitrary URLs. Because these destinations are chosen by the user or administrator, review the terms and privacy policy of the target site before running the tool.
Discord (discord.com) — Optional webhook notifications for automation results. Used only when you configure a Discord webhook URL on a specific automation. Sends the automation summary text you configured to the webhook URL. No data is sent unless you create a webhook entry. Terms: https://discord.com/terms Privacy: https://discord.com/privacy
Slack (slack.com / hooks.slack.com) — Optional webhook notifications for automation results. Used only when you configure a Slack incoming-webhook URL on a specific automation. Sends the automation summary text you configured to the webhook URL. No data is sent unless you create a webhook entry. Terms: https://slack.com/terms-of-service Privacy: https://slack.com/privacy-policy
/report-issue command and accept the feedback-consent modal that previews the exact payload. Each report contains the sanitized conversation excerpt and metadata you reviewed in the consent modal (with secrets and PII redacted before display). No background telemetry, analytics, or automatic error reporting is ever sent. Terms: https://ultimateagentwp.ai/terms/ Privacy: https://ultimateagentwp.ai/privacy/