How to manage WordPress with the Kiravo Toolkit

The WordPress Toolkit lets you manage every aspect of a WordPress install from inside the Kiravo control panel — no need to log into wp-admin for the day-to-day stuff. To open it, go to your website’s Apps tab and click Toolkit on the WordPress card.

The Toolkit has a sidebar with seven sections: General, Plugins, Themes, Users, Single sign on, Debug, and a Delete option at the bottom. This guide walks through each one.

General

The General section shows the install’s core details:

• Site URL — the address WordPress uses to build internal links and redirects. Click the pencil icon to change it. Changing this is rare — it’s effectively the WordPress home and siteurl settings.
• File path — where the WordPress files live on the server (e.g. public_html). Read-only.
• WordPress version — the current version and its update status (e.g. “All up to date”). The update policy is editable: pick whether you want automatic updates for major versions, minor versions only, or no updates at all.
• Maintenance mode — a toggle that puts the site into “Briefly unavailable for scheduled maintenance” mode. Use this while you’re making big changes so visitors don’t see a half-finished site.

Plugins

Lists every installed plugin with its version and status (Active / Inactive). Each plugin row offers:

• Activate / Deactivate — toggle the plugin on or off.
• Delete — remove the plugin entirely.
• Enable auto-updates — let WordPress keep this plugin up to date automatically.

The Install button at the top lets you add new plugins from the WordPress directory.

Themes

Lists installed themes, marking the Active one. Each row has Activate, Delete, and Enable auto-updates. Use Install to add new themes from the WordPress directory.

Users

Lists every WordPress user with their username and email. Use Add user to create a new WordPress account — useful for adding a client, a contributor, or another administrator without leaving the panel.

Single sign on

This is the connection that makes the Admin one-click-login button work on the app card. The linked account shown here is the user that gets logged in when you click Admin. Usually the Toolkit handles this automatically; you only need to interact with it if the linked user is removed or changed.

Debug

Three toggles for troubleshooting WordPress:

• WP_DEBUG — turns on WordPress’s general debug mode. PHP notices and warnings start surfacing.
• WP_DEBUG_LOG — writes every error to wp-content/debug.log so you can review them later without showing them on the live site.
• WP_DEBUG_DISPLAY — shows debug messages directly in the page HTML. Useful during development; dangerous on production because it can leak file paths and database details to visitors.

Caution

Turn off WP_DEBUG_DISPLAY on a live site. It can expose information attackers can use against you. The safe combination for production debugging is WP_DEBUG on, WP_DEBUG_LOG on, WP_DEBUG_DISPLAY off — errors get written to the log file you can read, but never to the page.

Delete

The Delete option at the bottom of the sidebar removes the app entirely. This deletes the WordPress files and can affect the attached database. The action is permanent — take a manual backup first if you might need the install again later.

Note

Updates matter for security. Keeping WordPress core, plugins, and themes updated is the single highest-impact thing you can do for site security. Consider enabling auto-updates for everything except plugins that have a habit of breaking on update — and even those, set a calendar reminder to check monthly.