● Start · Before you install
Requirements
what your site needs.
WordPress, PHP and a few server features. Most of them can be checked later in Settings → Tools & status → System status.
01What you need
| Item | Requirement | Notes |
|---|---|---|
| WordPress | 6.6 or newer | The admin app needs WordPress 6.6 (below it, the CryptoMeter page shows a notice; bot rules and signals keep working). Tested with WordPress 7.1.2. |
| PHP | 7.4 or newer | Verified on PHP 7.4.33 and PHP 8.4.25 (WordPress Playground). |
| Database | The normal WordPress database | Tables are created with the standard WordPress dbDelta API. All recorded test runs used SQLite in WordPress Playground. MySQL/MariaDB has not been tested yet, although it is the normal WordPress database. |
| Browser | A current browser with JavaScript | The admin screens are a React app built on WordPress's own components. |
| PHP sodium extension (recommended) | sodium_crypto_sign_verify_detached | Needed to verify Web Bot Auth signatures (and Ed25519 Coinbase CDP keys). Present on most PHP 7.2+ hosts. Without it, signed requests fall back to IP/DNS checks. |
| Outbound HTTPS | Your server can reach the official IP list URLs | See External services. If blocked, lists stay "Not fetched yet" and verdicts become "Unknown", never "Spoofed". |
| WP-Cron | Working WP-Cron or a real cron job | Daily list refresh and pruning, hourly spike check, weekly report. |
| Pretty permalinks (recommended) | Settings → Permalinks not "Plain" | Needed for /llms.txt, /license.xml and /.well-known/tdmrep.json on most servers. |
| Page cache | Must let AI bots reach WordPress | See Page caches. |
| Monetize only | A public EVM wallet address; outbound HTTPS to your facilitator | Optional. PHP DOM extension recommended (clean Markdown for paying agents). Node.js only for the demo client. |
You can check most of these at any time under CryptoMeter → Settings → Tools & status → System status.
WordPress Multisite
Has not been fully tested. The uninstall routine cleans up every site in a network (code read, not run on a network). Activate the plugin per site and test on a staging copy first.