Goldnat AI Connect for XenForo 1.2.41

Give your AI assistant access to what your members already wrote​

Your forum holds years of accumulated knowledge that an AI assistant cannot reach. This add-on exposes it through an open protocol, so an agent can search discussions, read threads, and answer questions grounded in what your community actually said.

Every request runs as the connected member. The agent sees exactly what that person sees in a browser — no more, no less. Private forums stay private.

Tools included​

Search that understands what you asked for​

Search runs through XenForo's own engine, so it accepts the syntax your members already use: "exact phrases" in quotes, +required and -excluded terms. Results are ranked by relevance, and responses carry a true total so an agent knows whether more remain.

Searching a base word also finds it inside longer forms — which matters for languages that attach prefixes directly onto words, where whole-word matching alone would miss the result.

You decide who can use it, and what they can reach​

Access is managed through XenForo's own permission system. Every tool has its own permission entry, so a usergroup can be allowed to search threads without being allowed to read posts. On top of that, existing content permissions still apply — an agent cannot see a node, thread or post that the connected account could not already see

Members stay in control​

Under AI Connect → My AI Tokens in the account area, a member sees every token they hold, when it was last used and from which client. Revoking is one click. Administrators get the same view across all users, with bulk revoke.

Security​

• OAuth 2.0 with PKCE — the member approves access explicitly; no password is ever shared with the agent
• Read-only — this add-on contains no write capability at all
• Native permissions — every result passes through XenForo's own permission checks
• Token management — members review and revoke their own tokens under AI Connect → My AI Tokens; administrators can revoke in bulk
• Rate limiting — built in, per site

How it works​

The add-on publishes a manifest describing the available tools. An agent reads it, authenticates via OAuth, and calls tools over HTTPS. Everything runs on your own server — there is no external dependency and no data leaves your forum except in response to a call the connected member authorised.

Installation​

Install like any XenForo add-on, then open the AI Connect page to generate a connection prompt. Paste it into your agent — it contains everything needed to connect.