Two-way webhooks for WordPress, without exposing anything.
Connect n8n, Make, Zapier, or your own scripts to WordPress in both directions. Visitors submit forms that reach your webhook and get an answer back; your automations push data that publishes itself. Your webhook URL and secret never reach the browser.
Two independent flows, one plugin.
A visitor asks, your webhook answers
A form on your site is proxied server-side to your webhook. The reply renders back on the page — as a single response or a threaded chat. The visitor’s browser never sees the webhook URL or auth token.
Your automation pushes, WordPress publishes
Your workflow posts JSON to a secret-authenticated endpoint whenever it likes. The plugin stores it under a named channel, displays it with a shortcode, and can turn it into a real post or page automatically.
Use one or both. A common pattern: Flow A powers an “ask a question” box; Flow B powers a channel that auto-publishes a draft every morning.
Built for people who already have a workflow.
Conversation mode
Turn any form into a threaded chat for RAG-style back-and-forth. Nothing is stored on the server — the thread lives in the visitor’s page only.
Copy & Export
Every reply carries a Copy button and an Export menu — Markdown, plain text, or a standalone HTML file. Entirely client-side, no new endpoint.
Post creation rules
Turn a channel’s payloads into WordPress posts or pages automatically. Identical content is deduplicated by hash, so a retry never doubles up.
Bridge your own forms
Already have a form? Add one data attribute and Webhook Engine proxies its submission and renders the reply — no rebuild required.
Markdown & table rendering
Replies render as formatted articles, structured tables, or raw JSON for debugging — your choice, per form or per display.
Full styling control
Every element ships with plain, theme-neutral CSS classes meant to be overridden. Nothing fights your theme.
Free is a complete tool, not a trial.
Every feature in the free plugin works fully — no watermarks, no time limits. Pro exists for one reason: you’re running more than one workflow, or you need trusted automations to act without a human clicking Publish.
| Free | Pro | |
|---|---|---|
| Named forms | 1 | 200 |
| Channels (display only) | Up to 20 | Up to 20 — same on both |
| Channels with auto post-creation | 1 | 200 |
| Draft posts from a form’s reply | Not available | Included |
| Post status on auto-create | Draft only | Draft, Pending, or Publish now |
| Featured images | Media Library or default | + Image URL, + inline AI-generated |
| Public form rate limit | 20 req/min per visitor | 60 req/min per visitor |
Secure by default, not by configuration.
Off until you turn it on
The inbound endpoint accepts nothing until you set a secret of 16+ characters, checked in constant time.
SSRF-checked webhook URLs
Localhost, private IP ranges, and unusual ports are rejected — both when you save a URL and again at send time.
Nothing is ever executed
Markdown, JSON, category and tag labels are escaped or sanitized. Raw HTML in a payload displays as literal text.
Images verified by bytes
Every image, from any source, is checked as a genuine JPEG/PNG/GIF/WebP before it’s stored — never trusted by extension.
Rate-limited by IP
Public form submissions are throttled per visitor, defending your webhook from a single bad actor without capping real traffic.
A honeypot, quietly
A hidden field absorbs bot submissions without ever tipping the bot off that it failed.
Start free. Upgrade only if you outgrow it.
One form, one channel, one automated workflow — free, forever, with no feature gated behind a timer.