Yes, when the connection keeps you in control. With Obi GEO your AI app can only read what you choose and suggest changes. Nothing on your site changes until you approve it in WordPress, and pages you keep from AI never leave your site.
Your AI app never gets a password
AI apps connect with OAuth 2.1, the standard sign-in for MCP: PKCE, a consent page that names the app and where it returns, and tokens that refresh and can be revoked. You choose the access (inspect, guides, sites, suggestions) and which sites each app can see. No WordPress password or application password is ever shared.
Your site checks every call
You link your site with the Connect button in WordPress. During that step the service fetches a one-time proof from your own site, so only someone who controls the site can connect it. After that:
- Every call from the service to your site is signed (Ed25519) with a timestamp and a one-time number, so it can’t be replayed.
- Your site checks the signature against keys published at
/.well-known/obigeo-keys.json. When a key is withdrawn, sites stop accepting it within about 10 minutes. - Staging copies of your site refuse calls, so a copy can’t act as your live site.
- You can disconnect from WordPress or from your account at any time.
What leaves your site
Your site answers one request at a time and the service passes the answer to your AI app. The service doesn’t keep a copy of your site’s content. Pages and services you keep from AI (premium or private), and Brand Facts you mark as internal, are filtered out of every answer, including overviews, backlog items, analytics and reports.
Changes need your approval
Suggestions wait in GEO → Suggestions. Each one is checked the same way as the settings screen, can’t blank or overwrite another item, and is checked again when you approve it. Approving saves a WordPress revision and a change-log line naming the AI app. Text fixes are refused on pages built with Elementor, Beaver Builder, Bricks, Oxygen, Thrive, Brizy or SiteOrigin; you edit those in the builder.
Inspections are polite
Inspections read public pages only, never private network addresses. They respect robots.txt for their own crawler, check a small number of pages, stop after a time limit, and run one at a time per account.
Report a security problem
Email support@obijuan.dev with “Security” in the subject. We answer security reports first. Please don’t test the service in ways that could affect other people’s sites.
More: How Obi GEO works · Privacy policy · Acceptable use
See what AI sees on your site
Create a free account with your email, connect Claude or ChatGPT, and ask it to inspect your website. Three checks a day, no card.