Security and trust
Controls for credentials, content, and publishing decisions
Security is built into the workflow, from authentication and validation to token accounting and WordPress delivery.
Encrypted WordPress credentials
Application Passwords are encrypted at rest with a dedicated application encryption key.
Secure authentication
Verified credentials accounts, Google OAuth, JWT sessions, and role-aware administrator routes.
Editorial review
Preview and draft workflows preserve a human approval point before content goes live.
Token usage logs
Metered generation and publishing actions create balance and usage records for accountability.
API validation
Zod schemas constrain URLs, statuses, dates, counts, and user-submitted request payloads.
WordPress publishing safety
Application Password auth and WordPress capabilities limit what connected accounts can do.
Shared responsibility
Your team remains in control
Use least-privilege WordPress accounts, HTTPS, protected environment variables, credential rotation, staging tests, and editorial review. AI Article Publisher supports these practices; it does not replace them.