The Integrations page lists every WordPress site connected to your workspace. From there you can review what each site may do, change its permissions, or revoke it.
The connections list
Each connection shows the site, its permissions, who added it, the linked website in your workspace, when it was last used and when it was created. A warning badge on a site means it is not yet linked to a website in your workspace but matches one.
Who can manage connections
Only the workspace owner and admins can use the Integrations page. An admin cannot edit or revoke a connection that the owner added. Those rows are marked as protected.
Changing permissions
Choose Edit on a connection to change its permissions. The same token keeps working, so you do not need to paste anything into WordPress again.
Revoking a connection
Choose Revoke and confirm. The plugin on that site loses access immediately, and its next request to TenthLoop is rejected. TenthLoop does not notify the WordPress site, so the plugin will simply start showing errors. A revoked connection disappears from the list.
Revoke a connection when:
- the token may have been copied or exposed,
- a person who managed the site has left,
- you no longer use the plugin on that site.
To reconnect later, generate a new token and paste it into the plugin.
Replacing a token
If you generate a new token for the same site in the same workspace, the previous one is revoked automatically.
Security notes
- Tokens are stored only as a one-way hash. TenthLoop cannot show you a token again.
- Requests must also come from the site address registered with the token.
- Repeated failed attempts from the same place are temporarily blocked.