WordPress is the highest-leverage distribution channel for Huddle. Build a free WP plugin "Hollahoop Huddle" published to the official wp.org repository plus the .zip download. Plugin loads the Huddle widget script, exposes a settings page in WP admin where users connect to their Hollahoop project (paste-a-token flow), and adds a small admin bar entry to toggle pin mode.

Auto-install flow from Hollahoop: when platform detection identifies WordPress, the onboarding wizard offers three install paths in order of preference. (1) App-password auto-install: user generates a WP application password (since WP 5.6) and pastes it; Hollahoop server uses the WP REST API to upload and activate the plugin, then immediately rotates by revoking the credential. (2) Login-creds auto-install: user pastes admin login; Hollahoop exchanges those for a fresh app password via the REST API, runs the install, then revokes the temporary creds. Original password is never stored. (3) Manual zip: download link with one-paragraph instructions.

Security: all credentials handled server-side over TLS, never stored in DB beyond the brief install transaction, every step audit-logged. Gracefully detects already-installed plugin and updates instead. Settings token can be rotated from Hollahoop side. Out of scope: the widget itself (separate card), Webflow/Shopify/Squarespace plugins (later cards if demand appears).