Injects the widget script
<script async src="https://api.orcalinq.com/w.js" data-tenant="chat_…" data-api="https://api.orcalinq.com"> on every public page. Same shape the dashboard's install snippet emits.
A thin connector plugin that injects the widget, manages the CSP allowlist, and verifies install status. All knowledge, routing, agent, audit, and analytics configuration lives in the OrcaLinq Admin Portal.
Sign up free — passwordless sign-in by email, no credit card. The free plan includes the website widget and a sandbox tenant.
chat_…).The simplest install: a thin WordPress plugin that injects the widget, manages the CSP allowlist, and reports install status. No theme edits.
<script async src="https://api.orcalinq.com/w.js" data-tenant="chat_…" data-api="https://api.orcalinq.com"> on every public page. Same shape the dashboard's install snippet emits.
Three modes — Auto-allow (default; emit a permissive CSP only when your site has no other CSP), Force, or Off. Defers to existing security plugins automatically.
A server-side check against the OrcaLinq install-verify endpoint. Works on staging sites that aren't reachable from the public internet.
Use this if you already have WPCode, Insert Headers and Footers, or Code Snippets installed and don't want another plugin.
</head>.WooCommerce stores get the widget through the same WordPress plugin — it loads on every public page including product, cart, and checkout.
Live order data, customer identity, and stock lookup require the WooCommerce data connector (not yet shipped). Without the connector, the AI answers from approved knowledge (FAQ, return policy, shipping policy, public product pages) and hands off when live order data is needed.
View page source on a public URL and search for api.orcalinq.com/w.js. If missing, the plugin isn't enqueueing — re-check that the Tenant Key is saved and the Load on public site checkbox is on.
If your security plugin (Wordfence, Sucuri, Solid Security, Really Simple SSL Pro) sets a strict CSP, the OrcaLinq plugin defers to it automatically. Add api.orcalinq.com to both script-src and connect-src in your existing rule.
If you can't reach /wp-admin at all and the browser shows a security interstitial that never resolves, your edge security rules may be blocking admin access. Add a rule in your security provider to skip bot challenges when the URI path contains /wp-admin.
The plugin verifies against home_url(), which uses your WordPress site URL. If WordPress is on example.com but visitors hit www.example.com, add both domains in OrcaLinq Admin or use a wildcard (*.example.com).
Re-issue the key from OrcaLinq Admin Portal → Domains → Installation → Rotate. The old key keeps working until the new one is saved.
Self-hosted WordPress (WordPress.org) only. WordPress.com Business+ tiers that allow plugins also work; lower tiers don't allow custom plugins. For WordPress.com sites without plugin access, paste the install snippet via Code Injection.
Yes. The script tag uses async loading; caching plugins (WP Rocket, W3 Total Cache, LiteSpeed Cache, etc.) don't need any special configuration. The plugin uses wp_enqueue_script so caching plugins compose correctly.
No. The bubble script is tiny (~2.4 KB gzipped) and loads async. The heavy chat UI is loaded lazily inside an iframe only when the visitor clicks the bubble.
By design. OrcaLinq keeps the entire control plane in the Admin Portal so a single source of truth is maintained across web, WhatsApp, LINE, Telegram, Instagram, Messenger, and Shopify. The plugin's only job is install + CSP + status.
Use the standard WordPress filters (wp_enqueue_scripts) to dequeue 'aichat-widget' on specific pages or post types. Per-URL visibility rules in the plugin UI are on the roadmap.
Once listed on wordpress.org, updates ship via the standard WordPress plugin auto-update channel. For manual installs, download a new zip and re-upload — settings are preserved.
Sign in to your <a href="https://app.orcalinq.com">tenant admin portal</a> and use Domains → Installation → Diagnose for a server-side troubleshooting wizard, or get in touch.