scrt.link for WordPress

scrt.link for WordPress A WordPress plugin that adds a single Gutenberg block — Send me a secret — so visitors can send you end-to-end encrypted, self-destructing messages via scrt.link. Encryption happens in the visitor's browser. WordPress forwards only ciphertext to scrt.link (authenticated with your API key), and the resulting one-time URL is emailed to your notification address. WordPress never sees plaintext. How it works 1. Visitor fills the form. view.js (Interactivity API view module) loads scrt.link's client crypto module from your configured base URL and encrypts locally. 2. Ciphertext is POSTed to /wp-json/scrt-link/v1/submit with a WordPress REST nonce. 3. PHP verifies nonce, enforces a per-IP rate limit, adds the site's scrt.link Bearer token, and forwards to POST {baseUrl}/api/v1/secrets. 4. scrt.link returns { secretLink, receiptId, expiresAt }. PHP emails the link to the site's notification address. Visitor sees a success message. Architecture Modern stack alignment Per the April 2026 next-generation WordPress plugin build tooling article, @wordpress/build is the future but is not yet recommended for single-block plugins. We therefore: - Use @wordpress/scri