How To Review Connector Credential Access With BetterShield?
Review where WordPress AI connector credentials are stored and how broadly active plugin code can read them.
In BetterShield, open BetterShield › Agents › Agent surface › Connector credentials on WordPress 7.0 or newer.
What it does
The table reports supported connectors, whether a credential is configured, where it comes from, and the number of active plugins that can read it in process. It never returns the credential itself. Database values are settings, and environment variables or PHP constants are readable by code running on the site. WordPress does not isolate them per plugin.
Step 1: Review Connector Credential Access
There is no BetterShield setting. Configure connectors through WordPress or their owning plugin, then reload the Surface.
Recommended settings
Keep only necessary, trusted plugins active on a site that stores connector keys. Prefer restricted provider keys and rotate a key after suspected exposure.
What it can break and how to undo
The report is read-only. Removing or rotating a connector key can stop AI features that use it. Update the connector configuration with the replacement key.
Final Outcome
The configured state should match the connector’s own screen. The table should show only masked state and metadata, never the secret value.
Related
- Review abilities registered on this site
- Ask for a plain-language audit explanation
- What BetterShield contacts
This is how you can review connector credential access with BetterShield.
Getting Stuck? Feel free to contact our Dedicated Support Team.