# Plugin 7.2: connect by browser sign-in · Founder notes · respira.press > Claude Desktop, claude.ai, Claude Code, ChatGPT, Cursor and Codex can add a WordPress site as a connector by URL, with a browser sign-in. Source: https://www.respira.press/newsletter/plugin-7-2 --- Sent on 6 June 2026\. Prices and features may have changed since; [respira.press/pricing](https://www.respira.press/pricing) has the current ones. | [![Respira for WordPress](https://www.respira.press/logos/respira-logo-512.png)](https://www.respira.press/)Respira for WordPress[respira.press](https://www.respira.press/)Product & founder updatesRespira for WordPress plugin v7.2.0 is availableHi, A new Respira for WordPress plugin release is now available: v7.2.0. What is included in this release: **Connect by browser sign-in (OAuth 2.0).** Claude Desktop, claude.ai, Claude Code, ChatGPT (Developer Mode), Cursor, and Codex can now add your site as a custom connector by URL. The app discovers respira.press as the authorization server, you approve access once in the browser, and a site-scoped token is minted. Nothing to paste, nothing to download. The existing API-key, connect-by-link, and .mcpb paths are unchanged and keep working exactly as before. The native /mcp endpoint now advertises OAuth discovery per the MCP 2025-06-18 authorization spec: it serves /.well-known/oauth-protected-resource (RFC 9728) and its 401 carries a WWW-Authenticate: Bearer resource\_metadata="..." pointer so OAuth-native clients can start the flow. Existing key-based clients ignore the extra header. The authorization server (registration, authorize and consent, token, revoke) lives at respira.press. **New "Connect by browser sign-in" panel** on the Setup screen, showing your site's MCP URL and step-by-step instructions, with a copy-paste starter prompt. A new **Connected apps** page in the respira.press dashboard lists every app you connected this way and lets you disconnect one in a click. OAuth access tokens are bound to a single site (RFC 8707) and validated by introspection at respira.press: a token issued for one site is rejected on every other site. Tokens are short-lived, refresh on rotation with reuse detection, stored only as hashes, and are revocable from the dashboard. The remote endpoint can be turned off entirely with the respira\_mcp\_remote\_enabled filter. We strongly encourage updating to stay aligned with the latest fixes and improvements. Update/download: If you want help planning the update rollout across client sites, reply and we can assist. Best, Mihai – Respira for WordPressBuilt with care by Mihai · Respira.press[Website](https://www.respira.press/) · [Docs](https://www.respira.press/docs) · [Support](mailto:hello@respira.press)You're receiving this email because you have a Respira account.These are important updates about your service.[Unsubscribe from emails](https://www.respira.press/dashboard/settings?unsubscribe=true)Or visit your [dashboard](https://www.respira.press/dashboard) to manage your account. | | --- | ## Get the next letter One letter when something worth reading has shipped, written by the person who built it. No schedule, no sequence, and one click to leave. [Explore all Founder notes ](https://www.respira.press/newsletter)