Skip to content

WordPress

Add cited search to a WordPress site with a shortcode. A local REST proxy keeps the server key inside WordPress, so it never reaches a visitor’s browser.

Platform pluginDeveloper previewAll integrations
On this page

1Install the plugin

Build the installable zip from the DocSlurp repository:

TerminalShell
pnpm --filter @docslurp/sdk build
node scripts/package-wordpress-search.mjs
cd packages/contrib-wordpress && zip -r docslurp-search.zip docslurp-search

In WordPress, go to Plugins > Add New Plugin > Upload Plugin, upload docslurp-search.zip and activate it.

2Configure

Open Settings > DocSlurp Search and fill in:

SettingValue
API origin (HTTPS)Defaults to https://docslurp.io. Change it only for a self-hosted service.
Workspace slug or IDA workspace whose content is safe for anyone to read. Leave it blank to use your organization’s default workspace.
Search-only server API keyA server key with only the search scope. WordPress stores it in its options.

3Place the search box

Add [docslurp_search] to any page, post or Shortcode block.

How the proxy works

The proxy handles

  • A fixed workspace and result limit
  • Query validation and stripped internal metadata
  • Disabled provider-backed expansion options
  • Best-effort per-IP and global rate caps

It does not

  • Ingest or sync posts, edits or deletions
  • Replace WordPress’s built-in search
  • Enforce private-post or membership rules: search is public by design

Security

A nonce doesn’t authenticate anonymous visitors, so treat every result as public. Add a host or CDN rate limit; it is the authoritative abuse control, and the plugin’s caps are best-effort. Serve WordPress over HTTPS, keep the key in its protected options and include it in your secret-rotation process. A 429, 502 or 503 from the proxy means a rate cap was hit, DocSlurp was unreachable or settings are incomplete.

Hand off to an agent

Working in a real codebase? Copy a prompt that tells a coding agent exactly what to change for WordPress: which entry point to use, the supported contract, and what to validate before shipping. It contains no keys or secrets.

Review agent instructions

Before switching traffic, run through the go-live checklist. Stuck? See troubleshooting.

Jump to