Title: HarperFlow Author: TheFamousHesham Published: 21. august, 2026 Last modified: 27. oktober, 2026 --- Søk i utvidelser ![](https://ps.w.org/harperflow/assets/banner-772x250.png?rev=3658491) ![](https://ps.w.org/harperflow/assets/icon-256x256.png?rev=3658491) # HarperFlow Av [TheFamousHesham](https://profiles.wordpress.org/thefamoushesham/) [Last ned](https://downloads.wordpress.org/plugin/harperflow.1.5.2.zip) * [Detaljer](https://nb.wordpress.org/plugins/harperflow/#description) * [Omtaler](https://nb.wordpress.org/plugins/harperflow/#reviews) * [Installering](https://nb.wordpress.org/plugins/harperflow/#installation) * [Utvikling](https://nb.wordpress.org/plugins/harperflow/#developers) [Brukerstøtte](https://wordpress.org/support/plugin/harperflow/) ## Beskrivelse HarperFlow (https://harperflow.io) writes GEO-optimized articles with AI and publishes them to your WordPress site. Your posts publish and render natively in your theme** without this plugin — it is entirely optional. Installing it adds the extras WordPress core has no home for: * **SEO title & description** — written into Yoast or Rank Math when present, or emitted by the plugin itself when no SEO plugin is active. * **Self-contained HarperFlow article components** — preserves the renderer’s inline-styled feature header, table of contents, comparison cards, promotional CTAs, and author cards on REST writes for HarperFlow-authored posts only. * **Styled TL;DR box** and **FAQ accordion** — rendered from HarperFlow’s structured metadata, scoped only to HarperFlow-authored posts so the rest of your site is untouched. * **FAQPage structured data (JSON-LD)** — helps Google, Bing and AI answer engines understand each article’s FAQ. How it works: 1. Registers HarperFlow post meta (`_hf_*`) with `show_in_rest` so HarperFlow can write SEO/FAQ/TL;DR data over the REST API. 2. Re-exposes Yoast / Rank Math SEO meta over REST when those plugins are active ( they hide those keys from REST by default). 3. Serves `GET /wp-json/harperflow/v1/health` so HarperFlow can detect the plugin and which SEO engine is live. 4. Preserves HarperFlow-rendered article HTML with a narrow KSES allowlist. Scripts, iframes, event handlers, and unsafe URL schemes are still stripped. 5. Adds a **HarperFlow** menu in wp-admin: connection status, the HarperFlow articles sent to this site (with their content type + topic cluster), and a link into the full HarperFlow dashboard (autopilot, scheduling, veto inbox, GEO reports). ### External services This plugin connects your site to HarperFlow, a third-party Software-as-a-Service platform (https://harperflow.io) that writes and publishes articles to your site. The plugin communicates with two HarperFlow hosts: * **api.harperflow.io** — the HarperFlow API. * **app.harperflow.io** — the HarperFlow web dashboard (opened in your browser). **What is sent, and when:** * **On Connect** (you paste a pairing code and click Connect): your site URL, your WordPress username, and a WordPress Application Password the plugin mints for HarperFlow are sent to `api.harperflow.io` so HarperFlow can publish to your site. Nothing is sent until you initiate the connection. * **On «Open HarperFlow Dashboard (SSO)»** (you click the button): your site host ( used as your HarperFlow account identifier), this plugin’s version number, and an HMAC-signed timestamp are sent to `api.harperflow.io` to mint a one-click sign-in link, then your browser opens `app.harperflow.io`. * **On HarperFlow article writes**: HarperFlow calls this site’s REST API (authenticated with the Application Password above) to publish or update its own articles. This plugin sends nothing outbound here; it only receives and stores the article data. No data is transmitted for visitors of your site, and nothing is sent in the background without an action you took. Use **Disconnect** at any time to revoke the Application Password and clear the stored credentials. By connecting, you agree to HarperFlow’s Terms of Service (https://www.harperflow. io/terms-of-service) and Privacy Policy (https://www.harperflow.io/privacy-policy). ## Skjermbilder [⌊The HarperFlow panel inside wp-admin — plugin status, one-click sign-in to your dashboard, and every published article tracked with its content type and topic cluster.⌉⌊ The HarperFlow panel inside wp-admin — plugin status, one-click sign-in to your dashboard, and every published article tracked with its content type and topic cluster .⌉[ The HarperFlow panel inside wp-admin — plugin status, one-click sign-in to your dashboard, and every published article tracked with its content type and topic cluster. [⌊Connecting takes one step — paste the pairing code from your HarperFlow dashboard; no passwords or API keys to manage.⌉⌊Connecting takes one step — paste the pairing code from your HarperFlow dashboard; no passwords or API keys to manage.⌉[ Connecting takes one step — paste the pairing code from your HarperFlow dashboard; no passwords or API keys to manage. [⌊What a published HarperFlow article looks like on your site — a featured image, a styled comparison table, a TL;DR summary, an FAQ, and JSON-LD schema, engineered to be cited by AI search.⌉⌊What a published HarperFlow article looks like on your site — a featured image, a styled comparison table, a TL;DR summary, an FAQ, and JSON-LD schema, engineered to be cited by AI search.⌉[ What a published HarperFlow article looks like on your site — a featured image, a styled comparison table, a TL;DR summary, an FAQ, and JSON-LD schema, engineered to be cited by AI search. ## Installasjon 1. Download `harperflow.zip`. 2. In your WordPress admin, go to **Plugins Add New Upload Plugin**. 3. Choose `harperflow.zip` and click **Install Now**, then **Activate**. 4. Go to **HarperFlow** in your wp-admin menu. 5. In your HarperFlow dashboard, add this WordPress site and copy the **pairing code**. 6. Paste the code into **Connect to HarperFlow** and click **Connect**. That’s it. One click links this site to your HarperFlow account — you never create or copy a password. The plugin mints a WordPress Application Password for HarperFlow automatically, registers the site, and enables one-click sign-in back to your dashboard. ## Ofte stilte spørsmål ### How do I connect my site to HarperFlow? Install and activate the plugin, open **HarperFlow** in your wp-admin menu, then paste the **pairing code** from your HarperFlow dashboard into **Connect to HarperFlow** and click Connect. The plugin does the rest. ### Do I need to create an Application Password myself? No. The plugin creates a WordPress Application Password named «HarperFlow» for you, using WordPress core, and sends it securely to HarperFlow during the one-click connect. You never create or copy a password. Application Passwords require WordPress 5.6+ and HTTPS; if they are turned off on your site (some security plugins, such as Wordfence, have a setting for this), the plugin tells you so you can turn them back on. Use **Disconnect** to revoke that password at any time. If a Reconnect cannot be confirmed (HarperFlow reports an error on its side, or its answer never arrives), you may see a second password such as «HarperFlow (2)». Leave it in place: HarperFlow may already publish with it. The next successful connect, or Disconnect, removes the extra one. ### Do my articles still publish without this plugin? Yes. Posts publish and render in your theme either way. Without the plugin, the SEO title/description and the dedicated styled FAQ/TL;DR sections are not added— but the FAQ and TL;DR text is inlined into the post body, so no information is lost. ### Should I edit HarperFlow articles in WordPress? No. HarperFlow sends each article to WordPress as a draft so you can preview it there, and a later update from HarperFlow can overwrite changes made in WordPress. Edit, approve, publish and discard HarperFlow articles in your HarperFlow dashboard. ### Does it touch the rest of my site? No. The styling and the content additions only run on single posts that HarperFlow authored (gated on a meta flag). ### Which SEO plugins are supported? Yoast SEO and Rank Math. HarperFlow writes the matching SEO meta when either is active; otherwise the plugin emits a basic title and meta description itself. ## Vurderinger Det er ingen omtaler av denne utvidelsen. ## Bidragsytere og utviklere «HarperFlow» er programvare med åpen kildekode. Følgende personer har bidratt til denne utvidelsen: Bidragsytere * [ TheFamousHesham ](https://profiles.wordpress.org/thefamoushesham/) [Oversett «HarperFlow» til ditt språk.](https://translate.wordpress.org/projects/wp-plugins/harperflow) ### Interessert i utvikling? [Bla gjennom koden](https://plugins.trac.wordpress.org/browser/harperflow/), sjekk ut [SVN-repositoriet](https://plugins.svn.wordpress.org/harperflow/), eller abonner på [utviklingsloggen](https://plugins.trac.wordpress.org/log/harperflow/) med [RSS](https://plugins.trac.wordpress.org/log/harperflow/?limit=100&mode=stop_on_copy&format=rss). ## Endringslogg #### 1.5.2 * New: FAQ structured data (FAQPage JSON-LD) for the FAQ inside HarperFlow articles. Articles HarperFlow wrote or updated since 19 October 2026 show their FAQ once and had no FAQ structured data with earlier versions of the plugin. With 1.5.2 they get it again. * Articles already on your site get it the next time HarperFlow updates them, for example when you edit one in HarperFlow or apply your template to existing articles from the Templates page. * Fix: articles HarperFlow wrote before 19 October 2026 showed their Key Takeaways and FAQ twice. The plugin no longer adds its own copy to an article that shows them itself. Those articles keep their FAQ structured data. * Fix: in the structured data, questions and answers decode HTML entities («&» instead of «&») and keep their line breaks. A password-protected post gets none while it is locked. * Fix: on WordPress 5.6 to 5.9, saving any post failed while the plugin was active. * Developer: the `harperflow_faq_schema` filter. Return false to print no FAQPage for a post, for example when an SEO plugin already prints one. #### 1.5.1 * Security: one-click sign-in («Open HarperFlow Dashboard (SSO)») is limited to site administrators. It signs in as the HarperFlow account owner, so Editors, Authors and Contributors can no longer use it. * Security: the fallback SEO title (used when no SEO plugin is active) is escaped. * Security: the sign-in request includes the plugin version, so HarperFlow can refuse sign-in from older plugin versions. * Reconnect safety: a failed Reconnect (for example an expired or mistyped pairing code) no longer revokes the Application Password HarperFlow publishes with. The previous password is revoked only after HarperFlow accepts the new one. When a Reconnect cannot be confirmed (an error on HarperFlow’s side, or no answer), the new password is kept as well, in case HarperFlow already uses it; the next successful connect, or Disconnect, removes the extra one. * Admin: the connect, disconnect, reconnect and advanced settings are shown to site administrators only. Other roles see the connection status. * Clearer connect errors: separate messages for a site already connected to another HarperFlow workspace, an account without the rights HarperFlow needs, an Authorization header removed by the host, a site address that is not HTTPS or not public, too many attempts, an error on HarperFlow’s side, and a pairing code that is invalid, expired or already used. The Application Passwords message names the security- plugin setting (Wordfence, for example) that turns them off. * Copy: the article counter reads «HarperFlow articles» (it counts drafts too), the admin page no longer says HarperFlow auto-publishes and asks you to edit, approve, publish and discard HarperFlow articles in HarperFlow, unpublished articles link to a preview, and the status column uses WordPress’s own status names. * i18n: every string on the HarperFlow admin screen is now translatable. #### 1.5.0 * Docs: added an External Services disclosure (the third-party HarperFlow hosts this plugin talks to, exactly what data is sent, and when) and bumped Tested up to 7.0. * i18n: user-facing admin and front-end strings are now translatable under the harperflow text domain. * Hardening: escapers are applied inline at every output site, and the FAQPage JSON-LD now encodes with JSON_HEX_TAG so a `` in a question can never break out. No behavior change — lint/robustness only. #### 1.4.2 * Security: the «Open dashboard (SSO)» handshake now also refuses a non-https API URL, so the signed request is only ever sent over https. Completes the https enforcement started in 1.4.1 (which covered the connect handshake and the Advanced override) by applying the same guard to the third and last outbound call. #### 1.4.1 * Security: the Advanced API URL override now requires https:// — a non-secure override is rejected at save time with a clear error, and the one-click connect refuses to send your Application Password to a non-https API URL even if an old/ injected setting has one (checked before minting the password, so nothing is created needlessly). * Clarity: «Treat this code like a password — don’t share it» warning next to the pairing code field. Whoever redeems the code first links your site to their HarperFlow account. #### 1.4.0 * New: true one-click connect. Enter the pairing code from your HarperFlow dashboard and click Connect — the plugin mints a WordPress Application Password via core( WP_Application_Passwords) and registers this site automatically. You never create or copy a password. Replaces the previous «paste your SSO key» step; the returned SSO secret is stored in the same option, so the existing HMAC style-preservation, one-click SSO, and SEO features work unchanged. * New: Disconnect button — revokes the HarperFlow Application Password and clears the stored SSO secret. Reconnect anytime with a fresh pairing code. * Clear errors for the WordPress < 5.6 / Application-Passwords-disabled cases ( with a fallback to connecting from the HarperFlow dashboard). #### 1.3.1 * Security: bind style-preservation to a per-site HMAC signature (sso_secret) instead of the forgeable _hf_authored meta flag. Authors cannot inject inline CSS without a valid HarperFlow integration signature. * Enhancement: allow color-mix(), clamp(), min(), max() CSS function values emitted by the adaptive renderer via the safecss_filter_attr_allow_css filter, with a tight security guard blocking url(), expression(), and javascript:. * Hardening: wrap wp_kses in try/finally so an unexpected throw cannot leak the expanded CSS allowlist into other filters in the same request. #### 1.3.0 * New: preserve HarperFlow’s inline-styled article components on REST writes for HarperFlow-authored posts only, while keeping scripts, iframes, event handlers, and unsafe URL schemes stripped. #### 1.2.0 * New: one-click SSO from wp-admin — “Open HarperFlow Dashboard (SSO)” signs you straight into your HarperFlow dashboard (no password). Paste the SSO key shown in the dashboard after connecting this site. Single-use, short-lived login tokens; minted server-to-server. #### 1.1.0 * New: HarperFlow admin dashboard page (wp-admin HarperFlow) — connection status, recent HarperFlow articles with their GEO metadata, and a link into the web dashboard. Read-only; never mutates site data. Purely additive over 1.0.0. #### 1.0.0 * Initial release: REST-exposed HarperFlow meta, Yoast/Rank Math interop, health route, scoped TL;DR + FAQ rendering, FAQPage JSON-LD. ## Meta * Versjon **1.5.2** * Sist oppdatert **6 timer siden** * Aktive installasjoner **Færre enn 10** * WordPress-versjon ** 5.6 eller nyere ** * Testet opp til **7.1.3** * PHP-versjon ** 7.2 eller nyere ** * Språk * [English (US)](https://wordpress.org/plugins/harperflow/) * Stikkord * [automation](https://nb.wordpress.org/plugins/tags/automation/)[content](https://nb.wordpress.org/plugins/tags/content/) [faq](https://nb.wordpress.org/plugins/tags/faq/)[geo](https://nb.wordpress.org/plugins/tags/geo/) [seo](https://nb.wordpress.org/plugins/tags/seo/) * [Avansert visning](https://nb.wordpress.org/plugins/harperflow/advanced/) ## Vurderinger Ingen omtaler er sendt inn ennå. [Din omtale](https://wordpress.org/support/plugin/harperflow/reviews/#new-post) [Se alle omtalene](https://wordpress.org/support/plugin/harperflow/reviews/) ## Bidragsytere * [ TheFamousHesham ](https://profiles.wordpress.org/thefamoushesham/) ## Brukerstøtte Har du noe å si? Trenger du hjelp? [Vis brukerstøtteforumet](https://wordpress.org/support/plugin/harperflow/)