ChecklistDek → Settings — one Save Changes applies all tabs.
Platform & Security
| Setting | What it does |
|---|
| Enabled | Global kill switch for ChecklistDek operations |
| Drift verification | Enables drift features (scheduled piece is Pro) |
| Encrypt credentials | AES-256 at rest for site Application Passwords using WP salts |
Panel layout & Exclude
| Setting | What it does |
|---|
| Client panel layout | How the panel looks on client wp-admin |
| Client panel title | Default heading (e.g. “Agency Checklist”) |
| Exclude options | REST setting field names API steps must not change remotely (e.g. url, email) |
Webhooks & Email (Pro)
- Slack / Discord / Teams URLs and per-event toggles.
- Email events and optional comma-separated recipients (defaults to site admin email).
- Empty event lists mean no messages for that channel.
Access & Roles
- Agency role presets (Admin, Developer, Auditor archetypes).
- Capability matrix — map custom caps (
view dashboard, manage sites, edit checklists, execute, view audit, manage settings) to WordPress roles.
Security practices
- Use Application Passwords per site, not your main password.
- Keep encrypt credentials on for production hubs.
- Restrict Manage settings and Manage sites to trusted admins.
- Review exclude options before running API steps that touch
/wp/v2/settings.
- WP Umbrella tokens are saved only from Integrations and are never shown again in the UI after save.
