WordPress OAuth for Openclaw

A specialized tool for managing WordPress.com OAuth authentication and automated post publishing.

ibrahimelnemr
v1.0.0
Mar 16, 2026
0
813
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install wordpress-oauth

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install wordpress-oauth using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is WordPress OAuth?

This skill provides a streamlined interface for handling the human-in-the-loop OAuth 2.0 flow required by WordPress.com and Jetpack-connected sites. It enables developers and AI agents to programmatically generate authorization URLs, securely exchange callback codes for access tokens, and manage post publication directly through the WordPress REST API. By using this Openclaw Skills component, you can integrate content creation workflows with established CMS platforms without manual API handling or complex session management.

WordPress OAuth Use Cases

  • Automating blog post creation from AI-generated drafts using Openclaw Skills.
  • Managing multiple WordPress site credentials via a secure local state store.
  • Streamlining the OAuth handshake process for custom CMS integrations.
  • Validating token health and permission scopes before executing high-volume publishing tasks.

How WordPress OAuth Works

  1. Initiation: Run the begin-oauth command with your client credentials to generate a secure authorization URL.
  2. Authorization: Open the generated URL in a browser to grant permissions, then capture the resulting redirect callback URL.
  3. Exchange: Use the exchange-token command to verify CSRF state and retrieve the bearer token from WordPress.
  4. Validation: Verify token validity and scopes using the token-info diagnostic tool to ensure the Openclaw Skills connection is active.
  5. Publication: Execute the publish-post command to send titles and content to your site as drafts or published articles.

WordPress OAuth Setup

To get started with this skill, ensure you have Python 3 installed and a registered WordPress.com Application for API access.

# Check available commands and arguments
python3 wp_oauth_skill.py --help

Configure your environment variables for client IDs and secrets, then initiate the flow using the begin-oauth command to link your account to Openclaw Skills.

WordPress OAuth Data Schema & Taxonomy

The skill manages its local state through specific JSON files to maintain security and persistence:

File Description
wp_oauth_skill.py The core Python script managing the API interactions and command-line interface.
oauth_state.json Stores temporary CSRF state during the active OAuth handshake.
credentials.json Persists the local access tokens and site metadata for authorized sessions.

WordPress OAuth Advanced Features

  • CSRF state validation to prevent cross-site request forgery during the authentication process.
  • Support for both native WordPress.com blogs and self-hosted sites connected via Jetpack.
  • Granular status control allowing posts to be pushed as drafts for human review or published immediately.
  • Built-in token health checks using the WordPress token-info endpoint to ensure long-running Openclaw Skills automations remain authorized.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*