Agency Pass

Agency Pass Self-service emergency login for agency staff on client WordPress sites. Description Agency Pass adds a magic-link login flow to the WordPress login screen. Staff with whitelisted email addresses can request a temporary login link that creates a time-limited user with a restricted admin role. No external infrastructure required — the entire solution is self-contained. Requirements - PHP 8.1+ - WordPress 6.4+ Installation 1. Upload the agency-pass directory to /wp-content/plugins/ 2. Activate the plugin through the "Plugins" screen in WordPress 3. On activation, a mu-plugin loader is installed to guarantee early loading Configuration Add constants to wp-config.php: Required Optional How it works 1. A "Agency Pass" button appears on the WordPress login form 2. Clicking it reveals an email input field 3. If the email matches the configured pattern, a single-use magic link is sent via wpmail() 4. Clicking the link creates a temporary user with the agencypassadmin role and logs them in 5. Expired users are cleaned up automatically via WP-Cron Custom role The agencypassadmin role has all administrator capabilities except: - editusers, deleteusers, createusers