Two-way webhooks for WordPress, without exposing anything.
Connect n8n, Make, Zapier, or your own scripts to WordPress in both directions. Visitors submit forms that reach your webhook and get an answer back; your automations push data that publishes itself. Your webhook URL and secret never reach the browser.
Two independent flows, one plugin.
A visitor asks, your webhook answers
A form on your site is proxied server-side to your webhook. The reply renders back on the page — as a single response or a threaded chat. The visitor’s browser never sees the webhook URL or auth token.
Your automation pushes, WordPress publishes
Your workflow posts JSON to a secret-authenticated endpoint whenever it likes. The plugin stores it under a named channel, displays it with a shortcode, and can turn it into a real post or page automatically.
Use one or both. A common pattern: Flow A powers an “ask a question” box; Flow B powers a channel that displays a fresh briefing every morning — and, with the Pro add-on, files it as a draft post too.
Built for people who already have a workflow.
Conversation mode
Turn any form into a threaded chat for RAG-style back-and-forth. Nothing is stored on the server — the thread lives in the visitor’s page only.
Copy & Export
Every reply carries a Copy button and an Export menu — Markdown, plain text, or a standalone HTML file. Entirely client-side, no new endpoint.
Publishing (Pro add-on)
Turn a channel’s payloads into WordPress posts or pages automatically. Identical content is deduplicated by hash, so a retry never doubles up.
Bridge your own forms
Already have a form? Add one data attribute and Deftmind Hookwright Proxies its submission and renders the reply — no rebuild required.
Markdown & table rendering
Replies render as formatted articles, structured tables, or raw JSON for debugging — your choice, per form or per display.
Full styling control
Every element ships with plain, theme-neutral CSS classes meant to be overridden. Nothing fights your theme.
Free is a complete tool, not a trial.
Every feature in the free plugin works fully — nothing is counted, capped or waiting on a licence. Pro is an add-on that does something the free plugin does not do at all: it turns what your workflow sends into real WordPress content.
| Free | Pro | |
|---|---|---|
| Named forms | Unlimited | Same |
| Channels | Up to 20 | Same |
| Send a question, show the reply | Yes | Same |
| Callback for slow workflows | Yes | Same |
| Threaded AI chat | Yes | Same |
| Articles, tables and live feeds | Yes | Same |
| Copy, Markdown, Text, HTML export | Yes | Same |
| Bridge mode for an existing form | Yes | Same |
| Payloads become posts or pages | — | Yes |
| Replies become posts or pages | — | Yes |
| Draft, Pending review or Publish | — | Yes |
| Featured images, four sources | — | Yes |
| Word and PDF export | — | Yes |
| Post publish webhooks | — | Yes |
The newest of these works the other way round. Post publish webhooks send a webhook out the moment a post, page or custom post type is first published — whether this plugin created it or you wrote it in the editor. Feed an automation platform that then posts to WhatsApp, Slack or anywhere else.
Every post type gets its own address and its own choice of fields, automatically. Your own custom fields travel with it, including Advanced Custom Fields (ACF). A Test webhook button proves the whole path before you rely on it, and optional one-click signing lets the receiving end verify each message genuinely came from your site.
Secure by default, not by configuration.
Off until you turn it on
The inbound endpoint accepts nothing until you set a secret of 16+ characters, checked in constant time.
SSRF-checked webhook URLs
Localhost, private IP ranges, and unusual ports are rejected — both when you save a URL and again at send time.
Nothing is ever executed
Markdown, JSON, category and tag labels are escaped or sanitized. Raw HTML in a payload displays as literal text.
Images verified by bytes
Every image, from any source, is checked as a genuine JPEG/PNG/GIF/WebP before it’s stored — never trusted by extension.
Rate-limited by IP
Public form submissions are throttled per visitor, defending your webhook from a single bad actor without capping real traffic.
A honeypot, quietly
A hidden field absorbs bot submissions without ever tipping the bot off that it failed.
Start free. Upgrade only if you outgrow it.
One form, one channel, one automated workflow — free, forever, with no feature gated behind a timer.