Download

Two downloads. One minute to connect.

The plugin goes on every WordPress site you manage. Xaflo Desktop goes on your computer and runs the MCP server for Claude and ChatGPT. Every version, size and checksum below is read live from the same feeds your sites and apps update from.

WordPress plugin

Xaflo WP Connect

v1.7.0

November 11, 2026523 KBWordPress 6.0+ · PHP 8.1+MIT

Download the plugin Verify it

xaflo-wp-connect-1.7.0.zipSHA-256

5448186ab0bb3c6ffef58cc183eb9e49dbc0e3db17abe25f140a90fc8ba08766

Desktop app

Xaflo Desktop

Windows

v2.0.2

November 11, 2026Windows, 64-bit (x64)

Xaflo-Setup-2.0.2-x64.exe110.8 MB · SHA-512
2344918003ba106c05ac2c12f21221d5d90c71c479512412fe5f12cdbbd143cb890b5cb56cb147de3155ada66c4462c637c125490dfd374610e48e499e12e5c2
Download .exe

Linux

v1.1.1

May 19, 2026Linux x86_64, glibc 2.31+

Xaflo-1.1.1-x86_64.AppImage103.7 MB · SHA-512
012bc19cc7bc4ceff0495f0b09db8c8c3a09079ee7679c798a0a5eb8a6965150fb034b5472c3dd4ab62d34d4585ed4bcf697da1c1500aed5d1acf68c368d48b8
Download .appimage
Xaflo-1.1.1-amd64.deb71.8 MB · SHA-512
8eacce10bcc7499d09f32d3a8131c79508d531b64bc25c6876832d0aa5a07a044474eef0416279774ee5158892e51379c44fbcc2098bb523ad82039615626ed0
Download .deb

Each platform is shown at its own version. The app updates itself from its feed.

Jump to: release manifests · all files · verify · how updates work · requirements · install

Release manifests

The source of truth, live

These are the files WordPress and Xaflo Desktop read to decide whether to update. This page fetches them as you read it and explains each field.

/updates/v1/wp-claude-bridge.jsonServer copy

{
    "slug": "wp-claude-bridge",
    "version": "1.7.0",
    "requires_wp": "6.0",
    "tested": "7.0",
    "requires_php": "8.1",
    "released_at": "2026-11-11T13:37:44Z",
    "download_url": "https://wpconnect.xaflo.com/wp-content/uploads/2026/11/xaflo-wp-connect-1.7.0.zip",
    "homepage": "https://wpconnect.xaflo.com/wordpress-plugin/",
    "changelog_url": "https://wpconnect.xaflo.com/changelog/",
    "sha256": "5448186ab0bb3c6ffef58cc183eb9e49dbc0e3db17abe25f140a90fc8ba08766"
}

version: Compared with the installed version. If it is higher, WordPress offers the update.
requires_wp: Minimum WordPress version, shown on the update screen.
tested: Highest WordPress version tested, shown on the update screen.
requires_php: Minimum PHP version, shown on the update screen.
released_at: Release time in UTC.
download_url: Where the zip is fetched. Since 1.7.0 it must be https on xaflo.com, or the update is refused.
sha256: Required since 1.7.0. Checked against the downloaded zip before WordPress unpacks it; a mismatch aborts the update.
homepage: Linked from the plugin details screen.
changelog_url: Linked from the plugin details screen.

/desktop-updates/latest.ymlServer copy

version: 2.0.2
releaseDate: '2026-11-11T14:13:18.623Z'
releaseNotes: 'Xaflo 2.0.2: when you paste the instructions for your AI, Claude can now also tell you which permissions the token of that site has (sites with Xaflo WP Connect 1.7.0). Includes 2.0.1: Claude connects on the first try, with nothing else to install.'
files:
  - url: Xaflo-Setup-2.0.2-x64.exe
    sha512: I0SRgAO6EGwFrCwS8hIh1dkMccR5USQS/l8SzbvRQ8uJC1y1bLFH3jFVraZsRGLGN8ElSQ39N0YQ5I5JnhLlwg==
    size: 116220943
    blockMapSize: 121303
  - url: Xaflo-Setup-2.0.2-x64.exe.blockmap
    sha512: c0cgF1h9mH0RDPFXRk/4/ABvHAL/Zy9Jt/Vkex0x1w4VEQbjKrPcISSc4w48oaV4u1/BUJCPdqiRBYoysx3q5w==
    size: 121303
path: Xaflo-Setup-2.0.2-x64.exe
sha512: I0SRgAO6EGwFrCwS8hIh1dkMccR5USQS/l8SzbvRQ8uJC1y1bLFH3jFVraZsRGLGN8ElSQ39N0YQ5I5JnhLlwg==

version: The version the app compares with its own.
releaseDate: Release time in UTC.
releaseNotes: What changed, in one paragraph.
files: Each downloadable file: name, SHA-512 and size in bytes.
sha512: The SHA-512 digest in base64, the format electron-updater uses. sha512sum prints the same digest in hex.
blockMapSize: Size of the block map, used for differential downloads on Windows.
path: The main file again, for older updater versions.

/desktop-updates/latest-linux.ymlServer copy

version: 1.1.1
releaseDate: '2026-05-19T14:36:47.190Z'
releaseNotes: 'Linux build available. AppImage runs portable on any glibc 2.31+ distribution (Ubuntu 20.04+, Fedora 33+, Debian 11+). .deb installs system-wide on Debian/Ubuntu derivatives. Same features as the Windows v1.1.1 release: WP Xaflo Pro license activation, plugin deployer, file manager, maintenance toggle, debug.log console.'
files:
  - url: Xaflo-1.1.1-x86_64.AppImage
    sha512: ASvBnMe8TO/wSV8LCduMjDoJB57nZ5x5igpeuKaWUVD7A0tUcsPdSrYtNNRYXtS89pfaHBUArtXRrPaMNo1IuA==
    size: 108720519
  - url: Xaflo-1.1.1-amd64.deb
    sha512: jqzOELzHSZ0J8y06gTHHlQjVMbZLwlxodoMtCqWgegREdO7wQWJ5d07lFYiS5RN5xE+8wgmLtSOtggOWFWJu0A==
    size: 75314280
path: Xaflo-1.1.1-x86_64.AppImage
sha512: ASvBnMe8TO/wSV8LCduMjDoJB57nZ5x5igpeuKaWUVD7A0tUcsPdSrYtNNRYXtS89pfaHBUArtXRrPaMNo1IuA==

version: The version the app compares with its own.
releaseDate: Release time in UTC.
releaseNotes: What changed, in one paragraph.
files: Each downloadable file: name, SHA-512 and size in bytes.
sha512: The SHA-512 digest in base64, the format electron-updater uses. sha512sum prints the same digest in hex.
blockMapSize: Size of the block map, used for differential downloads on Windows.
path: The main file again, for older updater versions.

curl · fetch the manifests yourself

curl -s https://wpconnect.xaflo.com/updates/v1/wp-claude-bridge.json
curl -s https://wpconnect.xaflo.com/desktop-updates/latest.yml
curl -s https://wpconnect.xaflo.com/desktop-updates/latest-linux.yml

Files

Every file, with its fingerprint

Hashes are shown in hex, the form Get-FileHash, sha256sum and sha512sum print. The Desktop feed stores the same SHA-512 digest in base64.

File	Version	Size	Released	Runs on	Hash (hex)	Link
`xaflo-wp-connect-1.7.0.zip`WordPress plugin	1.7.0	523 KB	November 11, 2026	WordPress 6.0+ · PHP 8.1+	SHA-256`5448186ab0bb3c6ffef58cc183eb9e49dbc0e3db17abe25f140a90fc8ba08766`	Download
`Xaflo-Setup-2.0.2-x64.exe`Desktop for Windows (.exe)	2.0.2	110.8 MB	November 11, 2026	Windows, 64-bit (x64)	SHA-512`2344918003ba106c05ac2c12f21221d5d90c71c479512412fe5f12cdbbd143cb890b5cb56cb147de3155ada66c4462c637c125490dfd374610e48e499e12e5c2`	Download
`Xaflo-1.1.1-x86_64.AppImage`Desktop for Linux (.appimage)	1.1.1	103.7 MB	May 19, 2026	Linux x86_64, glibc 2.31+	SHA-512`012bc19cc7bc4ceff0495f0b09db8c8c3a09079ee7679c798a0a5eb8a6965150fb034b5472c3dd4ab62d34d4585ed4bcf697da1c1500aed5d1acf68c368d48b8`	Download
`Xaflo-1.1.1-amd64.deb`Desktop for Linux (.deb)	1.1.1	71.8 MB	May 19, 2026	Linux x86_64, glibc 2.31+	SHA-512`8eacce10bcc7499d09f32d3a8131c79508d531b64bc25c6876832d0aa5a07a044474eef0416279774ee5158892e51379c44fbcc2098bb523ad82039615626ed0`	Download

Previous versions plugin 1.5.2 plugin 1.5.1 plugin 1.5.0 plugin 1.4.1 desktop 1.1.1 Full changelog

Only the current files are offered for download. The changelog lists what every earlier release changed.

Verify your download

One command proves the file is ours.

A checksum is a fingerprint of the file. Hash the file on your own computer and compare the result with the one published here. If a single byte differs, the fingerprints do not match.

It catches

A download that was cut short or corrupted, and a file that was swapped or altered after we published it.

It does not prove

Who published it. That trust comes from reading the checksum here, over HTTPS on this site, not from wherever you got the file.

This page compares text you paste. It never reads or uploads your file.

Pick the file you downloaded

WordPress pluginxaflo-wp-connect-1.7.0.zipDesktop for Windows (.exe)Xaflo-Setup-2.0.2-x64.exeDesktop for Linux (.appimage)Xaflo-1.1.1-x86_64.AppImageDesktop for Linux (.deb)Xaflo-1.1.1-amd64.deb

Run one command

Each command already contains the expected hash. PowerShell prints True, Linux prints OK.

Windows · PowerShell

(Get-FileHash -Algorithm SHA256 "$HOME\Downloads\xaflo-wp-connect-1.7.0.zip").Hash -eq "5448186ab0bb3c6ffef58cc183eb9e49dbc0e3db17abe25f140a90fc8ba08766"

Linux · Terminal

cd ~/Downloads && echo "5448186ab0bb3c6ffef58cc183eb9e49dbc0e3db17abe25f140a90fc8ba08766  xaflo-wp-connect-1.7.0.zip" | sha256sum -c -

Change the path if your browser saved the file somewhere else.

Or paste the hash it printed

All published checksums

xaflo-wp-connect-1.7.0.zipSHA-256 · hex5448186ab0bb3c6ffef58cc183eb9e49dbc0e3db17abe25f140a90fc8ba08766
Xaflo-Setup-2.0.2-x64.exeSHA-512 · hex2344918003ba106c05ac2c12f21221d5d90c71c479512412fe5f12cdbbd143cb890b5cb56cb147de3155ada66c4462c637c125490dfd374610e48e499e12e5c2SHA-512 · base64 (as in the feed)I0SRgAO6EGwFrCwS8hIh1dkMccR5USQS/l8SzbvRQ8uJC1y1bLFH3jFVraZsRGLGN8ElSQ39N0YQ5I5JnhLlwg==
Xaflo-1.1.1-x86_64.AppImageSHA-512 · hex012bc19cc7bc4ceff0495f0b09db8c8c3a09079ee7679c798a0a5eb8a6965150fb034b5472c3dd4ab62d34d4585ed4bcf697da1c1500aed5d1acf68c368d48b8SHA-512 · base64 (as in the feed)ASvBnMe8TO/wSV8LCduMjDoJB57nZ5x5igpeuKaWUVD7A0tUcsPdSrYtNNRYXtS89pfaHBUArtXRrPaMNo1IuA==
Xaflo-1.1.1-amd64.debSHA-512 · hex8eacce10bcc7499d09f32d3a8131c79508d531b64bc25c6876832d0aa5a07a044474eef0416279774ee5158892e51379c44fbcc2098bb523ad82039615626ed0SHA-512 · base64 (as in the feed)jqzOELzHSZ0J8y06gTHHlQjVMbZLwlxodoMtCqWgegREdO7wQWJ5d07lFYiS5RN5xE+8wgmLtSOtggOWFWJu0A==

How updates work

From the feed to your machine, checked on the way

WordPress plugin

When WordPress checks for plugin updates, the plugin fetches /updates/v1/wp-claude-bridge.json and caches it for 12 hours (one hour after an error). The request’s user agent carries the plugin version and your site’s address; nothing else is sent.
If the manifest’s version is higher than the installed one, WordPress shows the update on its normal screen. Since 1.7.0 a manifest is accepted only with a 64-character sha256 and an https download_url on xaflo.com; anything else is refused, and a failed check never reports “up to date”.
When you update, the plugin downloads the zip itself and compares its SHA-256 with the manifest. If they differ, the update stops with “Xaflo update integrity check failed”.
Only then does WordPress unpack and install it. “Check for updates” on the plugin’s row forces a fresh check; define( 'XAFLO_AUTOUPDATE_DISABLED', true ); in wp-config.php turns the channel off.

Xaflo Desktop

The app updates through electron-updater, which reads /desktop-updates/latest.yml on Windows and latest-linux.yml on Linux.
If the feed’s version is newer than the running app, it downloads the file named in files. /desktop-updates/<file> redirects to the copy in this site’s media library.
The feed carries the SHA-512 and size of every file, which electron-updater uses to check the download before installing. On Windows the .blockmap lets it fetch only the changed blocks.
On this side, the update server answers both feeds from stored release data and records nothing about the request in WordPress. Neither feed asks for, or receives, anything beyond the request itself.

Requirements

Spec sheet

WordPress: 6.0 or laterTested up to 7.0
PHP: 8.1 or laterOn the WordPress server
Site: Served over HTTPSLocal hosts such as localhost and *.test are exempt
Windows: 64-bit (x64)Installer that keeps settings and tokens on upgrade
Linux: x86_64 with glibc 2.31+Ubuntu 20.04+, Fedora 33+, Debian 11+; AppImage or .deb
MCP server: claude-wp-mcp 1.3.0, 84 toolsBundled; Node.js 18+ only if you run it without Xaflo Desktop
AI clients: Claude Code, Claude Desktop, ChatGPT DesktopXaflo Desktop gives a ready-to-paste config for each
License: Plugin MITDesktop Lite is €0 for 1 site

Install

Four ways in

Then follow the Quick start

WordPress admin

Go to Plugins → Add New Plugin → Upload Plugin, choose xaflo-wp-connect-1.7.0.zip, then Install Now and Activate.

WP-CLI

Install and activate straight from the release URL:

Terminal

wp plugin install https://wpconnect.xaflo.com/wp-content/uploads/2026/11/xaflo-wp-connect-1.7.0.zip --activate

Windows

Run Xaflo-Setup-2.0.2-x64.exe and follow the installer. Later versions install over it and keep your sites and tokens.

Linux

Make the AppImage executable and start it, or install the .deb system-wide:

Terminal

chmod +x ~/Downloads/Xaflo-1.1.1-x86_64.AppImage
~/Downloads/Xaflo-1.1.1-x86_64.AppImage

sudo apt install ~/Downloads/Xaflo-1.1.1-amd64.deb