Workflow runs can contain trigger data, node configuration, provider responses, and error messages. Restrict access to run history and connections, and avoid sending secrets or unnecessary personal data through prompts and payloads. The plugin protects some credential fields, but not every value stored in WordPress or run history is encrypted or automatically redacted.
What the plugin stores
- Connection credentials: credentials managed by the Connections feature are encrypted before storage. The encryption helper uses AES-256-CBC with an HMAC integrity check and derives its key from the WordPress auth salt plus a plugin-generated key identifier. Connection screens display masked values rather than returning decrypted secrets to the builder API.
- Webhook signing secrets: stored encrypted and shown in masked form in the webhook editor. The UI displays the last four characters for a configured secret; the full existing secret is not shown again.
- Site-wide AI provider keys: the plugin’s site-wide key-saving route stores these in the
dragaiw_ai_provider_credentialsWordPress option. The inspected plugin code does not pass this option through the Connections encryption helper. On WordPress 7+ the plugin can read provider keys from the WordPress Connectors option. Protect database and administrator access accordingly. - Run history: the run record stores the trigger payload. Node logs store the node configuration snapshot as Input, the recorded action result as Output, and the failure message as Message. Webhook requests are parsed as JSON when possible; non-JSON bodies are stored as a
rawvalue, and the request IP is included in the trigger payload. - Workflow configuration: prompts, node settings, and variable mappings are part of the workflow data. Treat them as potentially sensitive if you include customer information or internal instructions.
Screenshot to add: [Run Details with trigger payload and node log]
Reduce sensitive data in logs and prompts
- Pass only the fields each action needs. Avoid placing API keys, passwords, access tokens, payment details, or unnecessary personal data in prompts and trigger payloads.
- Review each AI prompt and action mapping before activating the workflow. Data sent to an AI or external integration may be processed under that provider’s own terms and retention policies.
- Limit access to Agent Workflows → Runs, Agent Workflows → Connections, Agent Workflows → Webhooks, and Agent Workflows → Settings using the plugin’s feature-level capabilities.
- When sharing a failed run with support, redact customer information, webhook payloads, tokens, authorization headers, and any other private values.
Set run-history retention
Open Agent Workflows → Settings → Logging & Retention and review Keep finished run history for. The default is 14 days. Set the value to 0 to keep finished history indefinitely, or choose a shorter period that meets your troubleshooting needs. Purge Now immediately removes finished runs older than the configured retention period. The daily cleanup targets finished runs and their logs; do not treat this setting as a universal deletion policy for every workflow, connection, or option.
Deactivation and uninstall behavior
Deactivating the plugin does not delete its stored workflows, runs, logs, connections, or settings. By default, deleting the plugin also keeps its data. To opt in to removal, open Agent Workflows → Settings → Advanced, enable the option to permanently delete plugin data on uninstall, and save that setting before deleting the plugin. When the uninstall cleanup option is enabled, the plugin removes its own tables and listed settings/credential options.
Important limitations
Do not assume every AI provider key, prompt, trigger payload, or node output is encrypted or redacted. The Connections and webhook signing-secret paths have explicit encryption and masking behavior; run-history values are stored for diagnostics. Retention applies to finished run history, not as a guarantee that external providers, backups, database snapshots, or other WordPress plugins have erased copies.