One-use code
Pairing codes expire and cannot be reused.
E13 · Secure SaaS-to-WordPress pairing
Give DiviSync controlled access—not your WordPress password.
Register a website, generate a short-lived code, enter it in the Connector, and verify the resulting site-specific signed channel.
Per-site key
Every website receives an independent HMAC secret.
Replay defense
Timestamps and consumed nonces reject replayed requests.
No content writes
E13 has no page, asset, product or layout write handler.
E13 · Secure site pairing
Connect WordPress without sharing an administrator password.
Enter the private bootstrap token to begin.
01
Unlock setup
The token remains in this browser tab’s memory and is not embedded in the console build.
Registered websites
No workspace selected
No websites are registered in this workspace.
Deployment boundary
The bootstrap token is for private E13 server testing, not public production access.
- Use a random 32+ character token and HTTPS.
- Set DIVISYNC_ALLOW_BOOTSTRAP_AUTH=false before public launch.
- OIDC authentication through Authentik replaces this setup guard in the identity checkpoint.
- WordPress writes remain disabled and unimplemented.