The connector is the only thing MegaManager installs on your sites. Everything the dashboard shows or does passes through it.

Requirements

WordPress 5.0 or newer
PHP 7.4 or newer
Outbound HTTPS from the site to wpmegamanager.com

Installing

Two routes, and they behave identically:

From the WordPress.org directory — search MegaManager Connector under Plugins → Add New. This is the one that receives automatic updates.
From the dashboard — the plugin page always carries the current build, which occasionally runs ahead of the directory.

How the connection is authenticated

At connect time the site and MegaManager exchange a shared secret, stored in the site's own database. Every request afterwards carries that secret plus a signature over a timestamp, so a captured request cannot be replayed later than a few minutes.

The connector deliberately does not store your WordPress password.

Updating the connector

Treat it like any other plugin — it appears in the site's update list and can be updated in bulk from the Updates page along with everything else. Keeping it current matters more than for most plugins, because new dashboard features usually need a connector that knows about them.

Disconnecting

Settings → MegaManager → Disconnect on the WordPress side severs the link. The connector tells MegaManager immediately, the dashboard marks the site disconnected, and the shared secret is rotated so the old one is dead. Your data in MegaManager — backups, history, comments — stays.

Removing the site from the dashboard does the mirror image: MegaManager asks the connector to forget the pairing, so the plugin stops calling a site that is no longer being managed.

Deactivating versus deleting

Both tell MegaManager on the way out, so the dashboard reflects what happened rather than working it out later.

Deactivating stops the scheduled work but keeps the pairing. The site shows as disconnected, and the notification says so — reactivating the plugin reconnects it immediately, with no new key and nothing to set up again.
Deleting removes everything the connector stored, including the shared secret. Because the site no longer holds it, MegaManager retires its copy too: a deleted-then-reinstalled plugin is a fresh site and needs a new connect key.

If the site is simply down or unreachable, nothing can be sent — MegaManager notices that on its own by calling the site.

What it stores on your site

Options prefixed wpmm_ and wpmmb_: the site id and secret, the auto-update policy, maintenance-mode text, and notes. Logs go to wp-content/uploads/megamanager-connector/logs/, protected from direct access and pruned after 14 days. All of it is removed when the plugin is deleted.