CheckRoostCheckRoost
Integrations

SpinupWP

Read what SpinupWP already knows about every site on your servers, without a plugin on the site.

SpinupWP knows how each site is set up — its PHP version, whether PHP may run in its uploads folder, its backups, the server it is on — and none of that is visible from outside. Connecting the account lets CheckRoost read it.

What it does in CheckRoost

  • Every site, under Platforms, matched to its monitor by domain. A site no monitor watches is called out, with a button to create one.
  • A Hosting panel on each linked monitor, with the PHP version, whether PHP is blocked in uploads (red when it is not — the folder a webshell is dropped into), XML-RPC protection, page cache, backups and how long they are kept.
  • The server’s address, so the blocklist check measures that server rather than Cloudflare in front of it.
  • The server’s Ubuntu version, disk use and whether it needs a reboot.
  • The Git repository a site deploys from. With GitHub connected too, that repository is linked to the site’s monitor automatically, and its packages are checked for known vulnerabilities.
  • Changes on the monitor’s timeline: a PHP version moving, the server address changing.

SpinupWP reports PHP as a line, not a release

SpinupWP says a site runs PHP 8.3, not 8.3.27. That names the version but cannot say whether it is patched, so on its own it is listed on the Vulnerabilities page as one CheckRoost cannot judge. The CheckRoost WordPress plugin reports the exact release, and is used first wherever it is installed.

About the token

SpinupWP’s API tokens cannot be limited to reading. Any token can also reboot servers, change PHP versions and delete sites. CheckRoost only ever sends read requests with it: the code that calls SpinupWP can send nothing but GET, and a test fails if that ever changes. The token is encrypted when you paste it and opened only by the part of CheckRoost that reads the account. If you would rather it reached less, create a SpinupWP team that holds only the servers to watch and connect that team’s token.

Hooking it up

  1. Step 1. Generate a token

    SpinupWP→My Account→API Tokens→Generate token for your own servers, or Team Settings→API Tokens for a team’s.

  2. Step 2. Paste it into CheckRoost

    Settings→Integrations→SpinupWP. It is checked against SpinupWP before it is stored, and the page says how many sites and servers it reaches.

  3. Step 3. Check the links

    Under Platforms, each site whose primary domain matches exactly one monitor is linked already. Confirm or correct the rest.

Sites are read every fifteen minutes, within a minute of connecting, and straight away with Sync now.