WordPress plugin

The official DimensionKit for WordPress plugin connects your WordPress site to your DimensionKit account. It lets you authorize your domain in one click, list your scorecards, and embed them using a native block or shortcode.

The plugin is available on the WordPress.org Plugin Directory.

Key features

• Connect once: Authenticates with DimensionKit using OAuth 2.1. No API keys to copy or manage.
• One-click allowlisting: DimensionKit restricts embedding to authorized domains. The plugin automatically adds your site’s URL to the scorecard’s allowlist.
• Gutenberg block & shortcode: Place assessments using the native block editor or the [dimensionkit] shortcode.
• Responsive auto-resizing: The embedded iframe automatically adjusts its height as visitors answer questions, avoiding inner scrollbars.
• Built on MCP: Under the hood, the plugin operates as a Model Context Protocol (MCP) client communicating with https://app.dimensionkit.com/mcp.

Requirements

• WordPress 6.3 or newer
• PHP 7.4 or newer
• An active DimensionKit account
• A site served over HTTPS (required for OAuth redirect security; http://localhost is supported for local development)

Installation

1. In your WordPress admin, navigate to Plugins → Add New Plugin.
2. Search for DimensionKit.
3. Click Install Now, then click Activate.

Alternatively, download the plugin from WordPress.org and upload the .zip file via Plugins → Add New Plugin → Upload Plugin.

Connecting your account

1. In your WordPress admin menu, open DimensionKit.
2. Click Connect to DimensionKit.
3. You will be redirected to DimensionKit. Sign in if needed, then approve access.
4. You are returned to your WordPress admin, where your scorecards are now listed.

Allowing scorecards on this site

DimensionKit enforces origin security using the Content-Security-Policy: frame-ancestors header. A scorecard will not render on a domain unless that origin has been added to its allowlist.

To authorize your site:

1. In the DimensionKit admin screen, locate the scorecard in the table.
2. Click Allow on this site.
3. The status updates to Allowed on this site.

Domain matching

https://example.com and https://www.example.com are treated as distinct origins. The plugin automatically registers the URL configured under WordPress Settings → General (Site Address). If your site answers on both, ensure visitors use the configured address, or add the second origin manually in DimensionKit.

Embedding a scorecard

You can embed scorecards using the WordPress block editor or a shortcode.

Option 1: Block editor (Gutenberg)

1. Open the post or page editor.
2. Add a new block and search for DimensionKit Scorecard.
3. Select your scorecard from the dropdown in the block toolbar.
4. In the block settings sidebar on the right, you can optionally configure:
   • Minimum height: Initial iframe height in pixels before the scorecard reports its dynamic height (default: 400).
   • Title: Accessible iframe title for screen readers.

Option 2: Shortcode

Use the shortcode in the Classic Editor, text widgets, or page builders (Elementor, Beaver Builder, Divi, etc.):

[dimensionkit slug="your-scorecard-slug"]

Parameter	Required	Description
slug	Yes	The slug of the scorecard (displayed in the DimensionKit settings table).
min_height	No	Initial height in pixels before dynamic resize. Defaults to 400.
title	No	Accessible title for the iframe.

You can place multiple scorecards on the same page.

Visitor experience

When a visitor views the page, the scorecard loads directly inside your layout, matching its configured theme and resizing seamlessly.

Creating scorecards

Scorecards are created and configured in DimensionKit:

• Web interface: Click Write a new scorecard in the plugin settings screen to open the DimensionKit builder.
• AI assistant (MCP): Connect Claude, ChatGPT, or Cursor to DimensionKit’s MCP server using the connector URL displayed in the plugin settings (https://app.dimensionkit.com/mcp). Ask your assistant to design the dimensions, questions, and tiers. See the Connecting an MCP client guide.

After publishing a new scorecard in DimensionKit, return to WordPress and click Refresh list. The scorecard list is cached for five minutes by default.

Troubleshooting

Blank area where the scorecard should be

The site origin is not allowed yet. In WordPress, go to DimensionKit and click Allow on this site for that scorecard. Verify that your site protocol (https://) and domain match your WordPress Site Address setting.

Visible to administrators but not to visitors

The scorecard is likely still saved as a draft. Draft scorecards return 404 to visitors. Publish the scorecard in DimensionKit.

Newly created scorecard does not appear in the list

The scorecard list is cached for five minutes to minimize API requests. Click Refresh list on the settings screen to fetch the latest list immediately.

Disconnecting the account

Clicking Disconnect in the settings screen clears your stored OAuth tokens from WordPress. Existing scorecards already embedded on your site continue to function, as the site domain remains on the scorecard’s allowlist in DimensionKit.