BotCreds Agent Artifacts is a WordPress Plugin Directory app by Joe Boydston.
AppRanks verdict
Generated from live marketplace data — refreshed daily
BotCreds Agent Artifacts is a newly-listed WordPress app with a limited review volume. Category data on the canonical marketplace listing is currently incomplete, so AppRanks falls back to platform-wide rather than category-relative comparison for this listing. no published reviews yet means feature claims are unverified by the wider merchant base. Without a published review base, the only fit-signal available is the developer's own documentation plus the marketplace's listing-quality audit (linked below). Paid-only pricing means evaluating fit on the marketplace listing or via the developer's documentation before installing. AppRanks tracks rating, review count, pricing tier, and category position daily — the figures on this page reflect the most recent scrape from the canonical WordPress Plugin Directory listing.
Pros
- +Published by Joe Boydston — established developer track record
Cons
- −No public reviews yet — fit and reliability are unverified
Looking to switch from BotCreds Agent Artifacts?
See BotCreds Agent Artifacts's alternatives ranked by audit score, rating, and review velocity.
How BotCreds Agent Artifacts works
Show full descriptionShow less
BotCreds Agent Artifacts gives AI agents a permanent home for their outputs.
Post a single HTML file to the REST API. The plugin parses it, extracts scripts and styles, saves them as static files, enqueues them properly via WordPress APIs, and serves the result at a clean public URL with strict security headers. No build tools. No infrastructure. One API call.
How It Works
POST raw HTML to /wp-json/wp/v2/artifacts
The plugin extracts <script> and <style> blocks and saves them as static files in wp-content/uploads/artifacts/{id}/
JS and CSS are enqueued via wp_enqueue_script() / wp_enqueue_style() — no inline scripts in rendered output
The HTML body is sanitized with wp_kses() and an expanded allowed-tags list (canvas, SVG, inputs, video, audio, data-* attributes)
The artifact is served at yourdomain.com/artifacts/{slug}/ with a strict Content Security Policy
From the caller’s perspective: POST HTML, get URL. Everything else happens server-side.
Features Deployment
Single REST API call — no SDK, no library, any HTTP client works
Update artifacts in place — POST to /wp-json/wp/v2/artifacts/{id} and the public URL stays the same
Optional artifact_description field for internal documentation
Head content preservation — <meta> tags and other <head> elements from submitted HTML are preserved in output
External script support — <script src="..."> tags are registered as external dependencies and enqueued alongside local assets
Asset cache busting — enqueued files are versioned with filemtime() so browsers fetch updates automatically
Clean redeploys — old asset files are deleted before new ones are written
Security
Content Security Policy on every artifact page — blocks external script injection and cross-origin data exfiltration by default
Trusted CDN list out of the box: cdn.jsdelivr.net, unpkg.com, cdnjs.cloudflare.com, esm.sh, cdn.skypack.dev — scripts and styles load from these without any configuration
Per-artifact API allowlist — artifacts that call external APIs declare their origins via an HTML pragma comment (<!-- artifact:fetch https://api.example.com -->) or a deploy-time meta field; the plugin adds them to connect-src automatically
Additional security headers: X-Content-Type-Options, X-Frame-Options, Referrer-Policy
Custom capability type — artifact capabilities are separate from standard post capabilities; only Administrators can create artifacts by default
Developer Hooks
botcreds_agent_artifacts_csp — filter the full CSP header value for any artifact
botcreds_agent_artifacts_allowed_html — filter the wp_kses allowed-tags array
botcreds_agent_artifacts_grant_to_role() — helper to grant capabilities to additional roles
Custom template — drop single-artifact.php in your active theme to replace the render template
Use Cases OpenClaw (AI personal assistant)
OpenClaw agents can deploy interactive dashboards, daily digests, data visualizations, and mini-apps in a single tool call. Generate the HTML, POST it, get the URL — no manual steps, no context switching.
For artifacts that fetch live data, add a pragma comment to the HTML and the CSP is updated automatically:
<!-- artifact:fetch https://api.openweathermap.org -->
For recurring reports (daily digests, weekly summaries), store the artifact ID after the first deploy and update in place on subsequent runs. The URL never changes.
Claude Code (terminal-based coding agent)
Claude Code sessions can invoke a shell deploy script directly after generating output. Add a scripts/deploy-artifact.sh to your project and reference it in your CLAUDE.md — Claude will use it to ship outputs without leaving the terminal. No manual copy-paste, no browser switching.
Codex (OpenAI coding agent)
Same pattern as Claude Code. Add deployment instructions to your AGENTS.md and Codex can write HTML, call the deploy script, and report the live URL — all in one agent run.
GitHub Actions (versioned project)
For projects that build a static HTML output — dashboards, reports, documentation, changelogs — a GitHub Actions workflow can deploy to an artifact on every push to main. The artifact ID is stored as a repository variable so the public URL stays stable across all future deploys. Push → build → deploy → done.
Example: Deploy via REST API curl -X POST "https://your-site.com/wp-json/wp/v2/artifacts" \ -u "username:application-password" \ -H "Content-Type: application/json" \ -d '{ "title": "My App", "status": "publish", "meta": { "artifact_html": "<!DOCTYPE html><html><body><h1>Hello.</h1></body></html>", "artifact_description": "Built by my AI agent" } }'
The response link field is the public URL of the deployed artifact.
Example: Artifact with Live Data Include the fetch pragma in your HTML — no configuration needed:
<!-- artifact:fetch https://api.openweathermap.org --> <!DOCTYPE html> <html> <body> <div id="weather"></div> <script> fetch('https://api.openweathermap.org/data/2.5/weather?q=Denver&appid=YOUR_KEY') .then(r => r.json()) .then(d => document.getElementById('weather').textContent = d.weather[0].description); </script> </body> </html>
Example: GitHub Actions Deployment name: Deploy Artifact on: push: branches: [main] jobs: deploy: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - run: npm ci && npm run build - name: Deploy to Artifact env: WP_SITE: ${{ secrets.ARTIFACT_WP_SITE }} WP_USER: ${{ secrets.ARTIFACT_WP_USER }} WP_PASS: ${{ secrets.ARTIFACT_WP_PASS }} ARTIFACT_ID: ${{ vars.ARTIFACT_ID }} run: | PAYLOAD=$(jq -n --arg title "My Dashboard" --rawfile html dist/index.html \ '{title: $title, status: "publish", meta: {artifact_html: $html}}') ENDPOINT="$WP_SITE/wp-json/wp/v2/artifacts" [ -n "$ARTIFACT_ID" ] && ENDPOINT="$ENDPOINT/$ARTIFACT_ID" curl -sf -X POST "$ENDPOINT" -u "$WP_USER:$WP_PASS" \ -H "Content-Type: application/json" -d "$PAYLOAD" | jq -r '.link'
Keyword rankings
BotCreds Agent Artifacts ranks for 1 keywords across WordPress Plugin Directory. Here are the top 1:
- 1.ai agentRank #390
Competitors & alternatives
AppRanks tracks competitor sets per category. For BotCreds Agent Artifacts, the independent listing audit includes a competitive context section, and the full WordPress app index shows the broader marketplace landscape this app competes in. Sign up free to surface a side-by-side competitor matrix customized to your tracked apps.
Frequently asked questions
What is BotCreds Agent Artifacts?
BotCreds Agent Artifacts is an app for WordPress. It is published on WordPress Plugin Directory and tracked by AppRanks, and AppRanks has been tracking its public marketplace data on the refresh cadence published in our methodology. AppRanks tracks its category position, review-velocity trend, and the top alternatives in the same space. Developed by Joe Boydston.