~ digitalchk / docs / toolkit-chk
Toolkit Chk publishes a library of small utilities on your site, each on its own page: checkers, generators, converters and encoders. Individually none of them is remarkable. Together they are the reason people arrive at a site at all, and they give you a reason to talk to the ones who do.
How it works
Tool library
Each utility gets its own URL under /tools/, grouped into categories that also get their own pages.
Its own sitemap
The tool pages are virtual routes rather than posts, so the plugin serves /sitemap-tools.xml for them. Announce it in robots.txt or search engines will not find them.
Selective enabling
Any tool can be turned off without touching code, and the sitemap and category pages follow.
Access gate
An optional gate that asks for an email before a tool runs, configurable per tool.
Requirements
- WordPress 5.8 or newer
- PHP 7.4 or newer
Publishing it
Drop one of these shortcodes on any page or post. Each one is self-contained and needs no theme integration.
[toolkit_chk][cyber_tools]
Attribution. The plugin shows a small “A tool by Digital Checkmark” line, with a link to digitalchk.com, under the results of every tool, under the tool catalog, at the foot of the PDF report and under every email it sends. It is part of the plugin and has no setting to turn it off. If a tool and a Leads Chk form share a page, the line shows once.
Setup
Anti-abuse Recommended
Under Settings, add your Cloudflare Turnstile site key and secret key. Without it, anyone can script the public tool and consume your quotas on the outside services it uses.
With the keys in place, the plugin also refuses to email a verification code or a report unless the visitor recently passed a Turnstile check. A normal search counts; if not, a small check window opens before sending.
Email verification Recommended
The plugin verifies in three layers before sending a report: format, disposable domain, and, if you add a Reoon key, a real deliverability check. This protects your sending reputation from bounces to invented addresses.
PDF reports Optional
Reports are converted to PDF by Gotenberg, which you self-host. Set its URL in the reports tab; on the same machine that is http://127.0.0.1:3000. Without Gotenberg the rest of the plugin works unchanged.
Delivery and branding
Configure the SMTP server that sends the reports and the branding that appears on them: name, tagline, logo, colors and cover.
Notifications and contacts Optional
It can notify you by email or webhook when a lead arrives and, if you use Leads Chk, hand that lead to it, which keeps your contacts and your newsletter. Everything filters by event and by source, so you are not paged for noise.
Usage wall with a code Optional
Free uses are counted on the server, and you choose how many, so a private window does not reset them. Past the limit the visitor confirms an email address with a 6-digit code, and the tool unlocks for the rest of the day. Code requests and wrong attempts are limited, with a temporary lock. An address nobody verified is never saved as a lead.
Lead capture and retention
When somebody asks for their report, the plugin stores the address as a lead along with a summary of the result, and builds the report only from the result the server kept when the check ran (for up to 2 hours), so it always matches what the tool found. You will find these under Leads, and they export to CSV.
Retention is governed by GDPR Retention (days): leads older than that are deleted automatically by a scheduled task. Set it to 0 to disable the purge, though we would not recommend it. Declare in your privacy policy what you store and for how long.
The plugin also works with the WordPress privacy tools (Tools > Export Personal Data and Erase Personal Data): one request exports or deletes everything it keeps for an email address, together with the other Digital Checkmark plugins you have installed.
If Leads Chk is installed, every address the plugin collects through a report, the usage wall or the access gate is also sent there, with tags (the tool, how the address arrived, business or personal, and the result) and a consent record. What happens next (saved only, newsletter offered with a checkbox, or subscribed) and which list it goes to is decided in this plugin’s Integrations screen. Addresses that were only looked up, and could belong to someone else, stay out of Leads Chk. Leads Chk can also place a newsletter form under the tool.
If something does not work
The tool pages are not being indexed.
Confirm that /sitemap-tools.xml is announced in your robots.txt. These are virtual routes, so your SEO plugin’s sitemap will not list them.
Getting help
Write to us through the support page. Include your plugin version, your WordPress and PHP versions, and the exact text of any error.