Mavrilo Connect

Mavrilo Connect lets you link your WordPress site to your Mavrilo workspace using a secure plugin token. No admin username or password is ever shared.

What Mavrilo can do once connected:

• Publish and schedule blog posts from the Mavrilo dashboard
• Update existing posts and pages
• Upload media files
• Read categories, tags, and authors
• Receive real-time notifications when content changes (webhooks)
• Set Yoast SEO, RankMath, or AIOSEO metadata on posts

Security highlights:

• Zero passwords stored — authentication uses a revocable plugin token
• Token is validated on every API request using constant-time comparison
• All traffic is over HTTPS
• Revoke access any time from WordPress or from Mavrilo

Connection flow:

1. Install and activate this plugin
2. Go to Settings → Mavrilo Connect
3. Click Connect to Mavrilo
4. Sign in to your Mavrilo account and select your workspace
5. Click Authorize — you’re done!

External Services

This plugin connects to Mavrilo (https://mavrilo.in), a third-party social media management platform. This connection is the entire purpose of the plugin — it cannot function without it.

When the external service is contacted:

• When you click “Connect to Mavrilo” — your browser is redirected to mavrilo.in to authenticate and authorise the connection.
• On every REST API request from Mavrilo — the plugin receives calls from mavrilo.in to publish, update, or read content.
• When content is published or changed — the plugin sends a webhook notification to mavrilo.in/api/v1/wordpress/plugin/webhook.
• On initial callback verification — the plugin calls mavrilo.in/api/v1/wordpress/plugin/verify to confirm the token is valid.
• On disconnect — the plugin calls mavrilo.in/api/v1/wordpress/plugin/disconnect to revoke the token server-side.

Data sent to Mavrilo:

• Your site URL
• Post titles, content, status, categories, tags, author IDs, and featured image URLs when content changes
• When Mavrilo requests it, the list of authors who can edit posts — their name, nicename, and email address — used only to attribute posts to the correct author
• No visitor data, no passwords, and no payment information is ever transmitted

Mavrilo privacy policy: https://mavrilo.in/legal/privacy
Mavrilo terms of service: https://mavrilo.in/legal/terms

If you disconnect the plugin, Mavrilo immediately revokes the access token and no further data is transmitted.