An app runtime for WordPress

Vibe-code apps that know your WordPress site.

AI-built apps — from a single-block calculator to a full multi-page web app — that read your posts, pages, and users with permission. Embed inside any post as a Gutenberg block, render at /apps/{slug}, or promote one to your site’s home page so it lives at /. Choose iframe mode for untrusted drop-ins, or inline mode when the app should behave like a real part of the site.

your-site.com/apps/dashboard

Top recipes this week

From your WordPress posts · signed in as Justin

  • Sourdough discard pancakes recipes · 4.2k
  • One-pot weeknight dal recipes · 3.7k
  • Cold-brew chocolate cake recipes · 2.9k
  • Roasted-garlic white bean dip recipes · 1.8k
// app.js — the typed bridge does the heavy lifting.
import { createBridge } from "@designsetgo/app-client";
const dsgo = createBridge();

const { posts } = await dsgo.posts.list({
  category: "recipes",
  per_page: 10,
});

const me = await dsgo.user.current();
WordPress 6.9+ Apps run on any modern WP install. WP 7.0 unlocks AI features.
Open source runtime Plugin, bridge, and CLI under GPL/MIT. Bridge spec is public.
You bring the model Connectors API holds the API keys. We never see them.

Six things that are true at the same time

The best of vibe-coding meets the best of WordPress.

Sandboxed without connection is an iframe with a static page. Connected without sandbox is a snippet plugin. The combination is what makes DSGo Apps a product.

The product has two trust models: iframe for strong isolation, inline for SEO and native routing. The bridge is shared; the risk profile is not.

01

Choose your isolation.

Iframe mode gives you the strongest browser-enforced isolation for untrusted bundles. Inline mode gives you crawlable pages with CSP + sanitization for trusted code.

02

Connected.

Apps read your posts, pages, and the current user through a permissioned bridge. They work with your real content, not a generic mockup.

03

Fast to ship.

Describe the tool. Drop a Claude artifact. Or run the CLI. From idea to a live URL on your site in under five minutes.

04

WordPress-native.

Lives at /apps/{slug} — or set it as your site’s home page and it lives at /. Embeds in any post as a Gutenberg block. Same login, same domain, same admin.

05

Two ways to build.

Drop in a saved artifact from wp-admin. Or build with Claude Code at your desk and deploy with one CLI command. Same runtime either way.

06

AI-callable.

Apps can publish abilities your site’s AI agent can invoke — AI-callable functions registered through WordPress’ Abilities API.

Why a new category

Snippet plugins are powerful but unsafe. Vibe-code platforms are safe but disconnected.

DSGo Apps combine a permissioned bridge with two rendering modes: a strongly isolated iframe path and a crawlable inline path for trusted code.

Snippet plugins
Iframed external apps
DSGo Apps
Strong isolation for untrusted bundles
No — runs with full site privileges
Sort of — opaque iframe, no data access
Yes — iframe mode; inline mode is trusted-code SEO mode
Reads your WordPress posts & users
Possible, but you write the REST plumbing
No — walled off, no data access
Yes — typed bridge, permissioned
Embeds in any post as a block
Snippets are global, not per-post
Only via custom HTML / Embed block
Yes — first-class Gutenberg block
AI-built without writing PHP
Generate snippets, paste at your own risk
Yes — generate elsewhere, iframe in
Yes — in-admin, CLI, or Claude artifact
Lives on your domain & WP login
Yes
No — separate hosting + DNS
Yes — /apps/{slug} or /, WP cookie

The wedge

Sandboxed and connected.
Apps that work with your site, not next to it.

Ship your first app in five minutes.

Free plugin. No credit card. No sign-up. Drop a bundle into wp-admin or scaffold with the CLI — same runtime, same bridge.