Point Portcullis at a public WordPress site and an Application Password. The credential is encrypted and stored server-side — your AI never sees it. The site must be reachable over public HTTPS (localhost and private hosts are rejected).