BotCreds Agent Artifacts

BotCreds Agent Artifacts is a WordPress plugin designed to enable the deployment and hosting of HTML-based artifacts through the WordPress REST API. It allows users or agents to create, update, and serve self-contained HTML applications or documents as WordPress posts, with each artifact accessible via a public URL. The plugin is particularly suited for scenarios where automated agents, CI pipelines, or developers need to programmatically deploy and manage static web applications or dashboards within a WordPress environment.

Artifacts are created by POSTing to a dedicated REST API endpoint, with support for specifying the artifact's HTML content, an optional description, and connect-src origins for Content Security Policy (CSP) configuration. The plugin supports in-place updates of artifacts, retaining the same public URL, and provides a mechanism to manage artifact IDs for subsequent deployments. Artifact capabilities are mapped to standard WordPress roles and permissions, allowing authors, editors, and administrators to control ownership and management of artifacts. Custom roles can be granted artifact capabilities through a provided function.

For security, BotCreds Agent Artifacts issues scoped credentials via BotCreds Agent Access, limiting each agent's permissions to artifact-related actions and reducing risk compared to full WordPress Application Passwords. Every artifact is served with strict CSP headers, with defaults that restrict script, style, and connect sources, and allow for customization via WordPress filters. Pre-approved CDNs are included for script and style sources, and additional origins can be specified either in the API request or through special HTML comments within the artifact source. The plugin also extends the allowed HTML tags beyond standard WordPress content, supporting elements such as canvas, svg, input, video, and audio, as well as data- attributes for interactive elements.

BotCreds Agent Artifacts integrates with agent workflows, including tools like OpenClaw, Claude Code, and GitHub Actions, by providing deployment instructions and scripts for automated publishing. org or directly through the WordPress admin interface. It is maintained in a public GitHub repository.