GreenScript PressBot – AI Chatbot & Site Agent

PressBot by GreenScript adds an AI chatbot to your WordPress site that answers visitor questions from your own content: your pages, posts, products and the notes you give it. You connect your own AI provider key, so you pay the provider directly for what you use, with no PressBot subscription and no markup.

How it works:

1. Paste an API key from Anthropic (Claude), Google (Gemini), OpenAI, DeepSeek or Ollama Cloud.
2. Pick your colors, greeting and position.
3. PressBot finds the answer on your published pages and products, and links to the page it came from.
4. Add knowledge base notes for anything that isn’t on the site yet: opening hours, policies, pricing details.

Answers from your site

• Site Answers – The chatbot searches your published pages, posts and WooCommerce products, reads the best match, and links its source. You choose which content types it can use, in priority order.
• Knowledge Base – Write notes for anything not on your site (up to 10 in the free version). They’re plain WordPress posts you can edit any time.
• Focus Mode – On by default. The chatbot stays on your site’s topics and politely declines unrelated requests, like writing an email or doing homework, so nobody uses your API key as a free AI assistant.
• External Knowledge – Optionally connect your own search endpoint for documents that live outside WordPress.

Made for your visitors

• Streaming replies – Visitors see the answer as it’s written.
• Customizable widget – Brand colors, position, greeting, suggested questions and an optional featured video.
• Explain buttons – Add “Ask PressBot” buttons next to any section with a shortcode, a data attribute or the JavaScript API, so visitors can ask about exactly what they’re reading.
• Works with page caching – The widget loads asynchronously and talks to the WordPress REST API.

In control of cost and privacy

• Bring your own key, kept safe – Keys are encrypted with modern authenticated encryption, never shown again after saving, and hidden from everything PressBot sends back. Conversations go only to the AI provider you chose.
• Keys outside the database – Set keys in wp-config.php or server environment variables if you prefer, or keep your Claude key off your server entirely with Key Relay in your own Cloudflare account.
• Key Freeze – Lock your stored keys away with an unfreeze code that only you hold. While frozen, nobody on your server can read them, PressBot included, and the chatbot keeps helping visitors with your offline message and matching pages.
• Rate limiting and a monthly budget – Limit how many requests the chatbot takes and set a monthly spending cap.
• Conversation history – Read past conversations and visitor feedback in the dashboard, with AI summaries of what visitors ask about.

Connect AI coding tools (MCP)

PressBot includes an MCP server, so tools like Claude Code, Cursor and Codex can read your site’s posts, plugins, comments and conversations. Off by default; administrators only.

Supported AI providers

• Anthropic Claude – Claude Haiku 5.5 is the recommended default: fast, low-cost, and the most reliable model in PressBot’s own tests.
• Google Gemini – Gemini 3.8 Flash and lower-cost Flash Lite options.
• OpenAI – GPT-6 models.
• DeepSeek – A very low-cost option for simple sites.
• Ollama Cloud – Open models such as GLM, with a free starter plan.

PressBot Pro

PressBot Pro adds an AI admin agent that runs your site from a chat box: edit and publish posts, fix SEO titles and descriptions in bulk, manage menus, comments, plugins and WooCommerce products, read Google Analytics and Search Console, and more, with 132 tools in all. Changes show a review card before they run, and most can be undone. Pro also adds lead capture, proactive messages, Telegram alerts, PressBot Shield login protection, and the full MCP tool set. See Pro.

External services

PressBot contacts outside services only as described here. Nothing is sent until the site owner configures the feature.

AI providers (the chatbot’s answers). The chatbot sends each visitor message to the one AI provider the site owner selects and adds an API key for. Each request includes the visitor’s message, the recent messages in that conversation, and the site context PressBot adds to answer it: the site name, instructions, knowledge base notes, and passages from the site’s published pages or products that match the question. Requests go directly from your server to the provider. The provider’s terms and privacy policy apply:

• Anthropic (Claude), api.anthropic.com. Terms, Privacy Policy
• Google (Gemini API), generativelanguage.googleapis.com. Terms, Privacy Policy
• OpenAI, api.openai.com. Terms, Privacy Policy
• DeepSeek, api.deepseek.com. Terms, Privacy Policy
• Ollama Cloud, ollama.com. Terms, Privacy Policy

Optional Key Relay (Anthropic only). If the site owner turns on Key Relay in Connections, Claude requests go to the owner’s own Cloudflare Worker (set up from https://github.com/greenscript/pressbot-key-relay), which forwards them to api.anthropic.com. PressBot sends nothing to the relay until the owner enters its URL and token.

When you click Test Connection in Settings, PressBot sends a short test message to the selected provider to check the key.

PressBot Cloud (optional, off unless the site owner connects it). PressBot Cloud, run by GreenScript at cloud.pressbot.io, lets the site owner pay for AI usage from prepaid credit instead of using their own API key. Nothing is sent to it until the owner clicks Connect in Connections and approves the site in their PressBot Cloud account. At that moment PressBot sends the site URL, the site name, the WordPress and PressBot versions, and the Freemius install ID (if the site has one), and receives a site token. After that, each AI request (the same content described under AI providers above, for the chatbot and for features like Improvements) goes to PressBot Cloud’s gateway instead of directly to the provider, and PressBot asks the gateway for the remaining credit balance. PressBot Cloud records only request metadata (time, site, model, token counts, cost), not the prompts or answers, and forwards each request to the AI model host, which processes it: Anthropic (Claude) and, for some features, an open-model host. Disconnecting in Connections stops all of this and revokes the token. Terms, Privacy Policy

Cloudflare API (optional, off unless the site owner connects it). If the site owner pastes a Cloudflare API token in Connections, PressBot sends requests to api.cloudflare.com with that token: to check the token and find this site’s zone, to ask Cloudflare to clear the cached copies of pages that changed (their URLs only), and, in Pro, to read this site’s Cloudflare analytics for the Analytics page, to add and remove firewall rules for addresses Shield has locked out (Edge Shield, only when the owner turns it on; the rule holds the blocked IP address and a short reason), and to switch Cloudflare’s Markdown for Agents setting when the owner asks. No other visitor data is sent; Disconnect in Connections stops all of it. Terms, Privacy Policy

Cloudflare Turnstile (optional, off unless the site owner turns it on). If the site owner turns on Turnstile for the chatbot or the login page, the visitor’s browser loads Cloudflare’s check from challenges.cloudflare.com on those pages (for the chatbot, only when the visitor sends a first message), and PressBot sends the resulting one-time token and the visitor’s IP address to challenges.cloudflare.com to confirm it. Terms, Turnstile Privacy Addendum

Cloudflare Web Analytics (Pro, optional, off unless the site owner adds a token). If the site owner pastes a Web Analytics token on the Analytics page, visitors’ browsers load Cloudflare’s beacon from static.cloudflareinsights.com, which measures page load performance without cookies or personal data. Terms, Privacy Policy

Cloudflare AI Gateway (optional, off unless the site owner adds a gateway URL). If the site owner enters their own AI Gateway URL in Connections, PressBot sends its requests to Claude, OpenAI, Gemini and DeepSeek through gateway.ai.cloudflare.com in the owner’s Cloudflare account instead of directly; the requests carry the same content and API keys as direct calls (see those services above), plus the owner’s gateway token if they set one. Terms, Privacy Policy

php.net (PHP security check). To tell you whether your server’s PHP still gets security fixes and is on its latest patch release, PressBot asks php.net for the public list of current PHP releases (php.net/releases/active.php). This happens at most once a day (once an hour if php.net cannot be reached), when Site Check or the security audit runs, including from a scheduled task, the REST API, or WP-CLI. No information about your site is sent. If php.net cannot be reached, PressBot falls back to a built-in table of end-of-life dates. Terms, Privacy Policy

Your own knowledge endpoint (optional). If you connect an External Knowledge endpoint in Settings, PressBot sends the visitor’s question to the URL you enter. That service is yours or your vendor’s; its terms apply.

YouTube (optional). If you add a featured video to the chat widget, the YouTube player loads from youtube-nocookie.com only after the visitor clicks Play. Terms, Google Privacy Policy

Error reports to pressbot.io (off by default). If you turn on error reporting in Settings, PressBot sends plugin errors to pressbot.io so we can fix them: the error type, code, and message (with file paths, API keys, and long tokens removed, cut to 500 characters), where it happened, the AI provider, a one-way hash of your site URL, the plugin, WordPress, and PHP versions, and the list of active plugins. Nothing is sent while the setting is off. Terms, Privacy Policy

Freemius (optional). PressBot uses the Freemius SDK for the optional Pro upgrade. On activation you can opt in to share basic site and usage information with Freemius, or skip it; skipping sends nothing. If you fill in the optional feedback form when deactivating the plugin, your answer is sent to Freemius. Terms, Privacy Policy

Source code

The JavaScript in assets/js is compiled from the TypeScript in src/ with Vite. To rebuild it, run npm install and then npm run build:prod in the plugin folder. package.json, vite.config.ts, and tsconfig.json are included. PHP dependencies in vendor/ are managed with Composer; composer.json and composer.lock are included.