- Compatible XF 2.x versions
- 2.2
- 2.3
- Additional requirements
- - XenForo 2.2.0+
- PHP 7.2+
- For OAuth 2.0 PKCE flow: HTTPS recommended
- License
- GNU General Public License v2 (GPL-2.0) Full license text included in LICENSE-GPL.txt within the download.
Give your AI assistant access to what your members already wrote
Your forum holds years of accumulated knowledge that an AI assistant cannot reach. This add-on exposes it through an open protocol, so an agent can search discussions, read threads, and answer questions grounded in what your community actually said.
Every request runs as the connected member. The agent sees exactly what that person sees in a browser — no more, no less. Private forums stay private.
Tools included
| Tool | What it does |
|---|---|
searchThreads | Search thread titles — phrase syntax, relevance ranking, paging |
searchPosts | Search the body of posts |
getThread | Read a thread and its posts |
getPost | Read a single post |
getCurrentUser | Identify the connected account |
Search that understands what you asked for
Search runs through XenForo's own engine, so it accepts the syntax your members already use: "exact phrases" in quotes, +required and -excluded terms. Results are ranked by relevance, and responses carry a true total so an agent knows whether more remain.
Searching a base word also finds it inside longer forms — which matters for languages that attach prefixes directly onto words, where whole-word matching alone would miss the result.
You decide who can use it, and what they can reach
Access is managed through XenForo's own permission system. Every tool has its own permission entry, so a usergroup can be allowed to search threads without being allowed to read posts. On top of that, existing content permissions still apply — an agent cannot see a node, thread or post that the connected account could not already see
Members stay in control
Under AI Connect → My AI Tokens in the account area, a member sees every token they hold, when it was last used and from which client. Revoking is one click. Administrators get the same view across all users, with bulk revoke.Security
- OAuth 2.0 with PKCE — the member approves access explicitly; no password is ever shared with the agent
- Read-only — this add-on contains no write capability at all
- Native permissions — every result passes through XenForo's own permission checks
- Token management — members review and revoke their own tokens under AI Connect → My AI Tokens; administrators can revoke in bulk
- Rate limiting — built in, per site
How it works
The add-on publishes a manifest describing the available tools. An agent reads it, authenticates via OAuth, and calls tools over HTTPS. Everything runs on your own server — there is no external dependency and no data leaves your forum except in response to a call the connected member authorised.
Installation
Install like any XenForo add-on, then open the AI Connect page to generate a connection prompt. Paste it into your agent — it contains everything needed to connect.
Need write access?
Goldnat AI Connect Pro adds 67 tools — posting, moderation, engagement, profiles, conversations, attachments including PDF reading, and forum discovery. It installs alongside this add-on and requires it.
Source
Documentation: https://plugins.goldnat.ai/xenforo/guide
