WP Tender Agent

The WP Tender Agent is the WordPress plugin that lets the WP Tender Manager talk to your site. Two steps to get it running — no purchase, no plugin-side licensing.

What this plugin does

The Agent opens a signed REST channel between your WordPress site and the WP Tender Manager. Every backup, restore, migration, schedule, security scan, plugin install or content edit you fire from the Manager is forwarded into WordPress through this channel. All work happens server-side on your own WordPress install — the Manager just sends commands and reads back results, no third-party data leaves your hosting. The Agent itself has no admin UI beyond a single settings screen for the activation token; there is no free or pro mode at the plugin level, no upsell, no separate dashboard. Anything tier-related (site count, feature gates) is enforced in the Manager.

Backup & restore

Full / DB / media / pages / posts backups on-demand or on a schedule. Restore from any zip with one click. Push to S3, R2, Google Drive.

Continuity (live replication)

Pair two WordPress sites so one mirrors the other in near-real-time. Promote the standby to live with a single dashboard click.

Site-to-site migration

Move a site from old host to new host in minutes — files, database, uploads, the whole package.

Malware scanner

WP.org checksum diff + 500+ signature patterns + uploads / config sanity checks. Flag-only — never deletes anything without your say-so.

Live status + metrics

CPU, RAM, disk, WP version, plugin/theme inventory, last-cron-fire — pulled every 30s and shown on your Manager dashboard.

Cloud destinations

Encrypted backup uploads to S3 / R2 / Google Drive. Credentials live in the Manager, never on the WP site.

WordPress management

Install, update, activate plugins / themes. Edit posts / pages from a Tiptap editor in the Manager. Moderate comments. Manage users.

Server-cron pulse

Replaces WordPress's traffic-dependent wp-cron with Manager-driven ticks. Backups and scheduled jobs fire on time even on low-traffic sites.

Install on WordPress

Grab the Agent ZIP from the Manager (Dashboard → Integrations), upload it to WordPress, activate, paste the token. Total time per site: under a minute.

Install flow · animated walkthrough

Settings live under WP admin → Settings → WP Tender. That's the only screen the Agent adds.

Open WP admin → Plugins → Add New → Upload Plugin. Pick wp-tender.zip (downloaded from your Integrations tab in the Manager).
Click Install Now, then Activate.
Open Settings → WP Tender in the WordPress admin sidebar. This is the only settings screen the plugin adds.
Paste the activation token from the same Integrations tab and click Save. The Agent self-verifies against the Manager; the site appears in your Manager dashboard within a second or two.

Updating

Plugin updates are pushed directly from the WP Tender Manager — there is no WordPress.org or Freemius update channel for the Agent. When a new Agent release is available:

You'll see an Update available badge on the Manager's Integrations tab.
Click Push update to all sites and the Manager rolls the new version out to every paired site over their existing ops-token channel. No manual ZIP upload, no per-site visit.
If you'd rather stage the rollout, you can also push to a single site from its detail page — handy for testing a new Agent build against one production site before fleet-wide deploy.

Troubleshooting

White screen / fatal after activation

Usually a PHP version mismatch. The Agent requires PHP 7.4+. Bump to PHP 8.1+ if your host supports it. To deactivate the plugin without admin access: rename wp-content/plugins/wp-tender via SFTP.

Token saves but site never appears in the Manager

Some hosts (WP Engine, Kinsta, Cloudways) block REST API traffic by default. Whitelist /wp-json/wpt/* in your hosting firewall. If you front the site with Cloudflare, make sure no WAF rule is rate-limiting /wp-json.

"Activation token mismatch"

Each org has one token, shown on the Integrations tab. If you rotated the token (the Rotate link on the same tab), every previously-activated site needs the new token pasted in to keep talking. Old tokens stop working immediately.