Hatch Connect FAQ
Answers to common Hatch Connect questions: headless WordPress, Cloudflare Workers and tokens, cost, SEO and plugin support, privacy, and how to undo it.
Last updated November 4, 2026
Answers to the questions people ask most about Hatch Connect, taken from the plugin’s own documentation.
Basics
What is headless WordPress?
WordPress is only your back office. You write and manage content there as usual, and a separate frontend shows it to visitors. Hatch sets up that frontend on Cloudflare and keeps it in step with WordPress.
What is a Worker?
A small program that runs on Cloudflare’s network. Hatch uses one to serve your frontend. It gets a free address ending in workers.dev, or you can use your own domain.
Do I have to use the frontend Hatch deploys?
No. The hatch/v1 REST API works with any frontend you build. The Astro frontend Hatch deploys is the easy way to start.
Do I need custom blocks?
No. Write with the standard block editor. Hatch reads what you write over REST.
Cloudflare and cost
Do I need to pay for Cloudflare?
The free Cloudflare plan includes Workers. Cloudflare sets the limits and prices; see Workers limits. Hatch itself has no fees.
What is a Cloudflare token?
A long password you create in your Cloudflare account. It lets Hatch upload your frontend, only with the permissions you tick.
What permissions does the token need?
Account, Workers Scripts, Edit is required. Account Settings, Read is optional. Zone Read and Workers Routes Edit are needed only for a custom domain. Use a token limited to one account and, for a custom domain, one zone.
Does Hatch see my Cloudflare token?
The token stays on your server. It is encrypted before saving, sent only to Cloudflare, never returned to your browser and never written to logs. Hatch has no server of its own to receive it.
Can I deploy somewhere other than Cloudflare?
Not in this version. The REST API works with any frontend you build.
Your site and data
Does Hatch create users or passwords?
Not for itself. You create a Subscriber user and an Application Password, and Hatch refuses accounts that can edit other people’s posts or manage the site. Visitors can create accounts only if you switch on Frontend accounts and WordPress’s “Anyone can register” is on.
Will my SEO settings carry over?
Hatch reads titles, descriptions and social settings from RankMath or Yoast SEO. With no SEO plugin, the frontend uses the post title and excerpt.
Will it work with my SEO, forms or shop plugin?
Hatch reads RankMath and Yoast SEO, Fluent Forms, WPForms, Contact Form 7, Gravity Forms, WooCommerce and Advanced Custom Fields when active.
Is my data sent anywhere without my consent?
No. Every external request is listed in privacy and third-party services and starts only after you enter the relevant token, key or address.
Why do the permalinks and links change?
The redirect and frontend links start when an administrator presses Deploy. The permalink change happens only if the administrator ticked the box for it.
My site is on localhost or behind a firewall. Can I deploy?
You can check your token and deploy, but the frontend must reach your site over https. Use a public address or a tunnel.
Undoing it
How do I undo it?
Open Hatch, Connection, then Disconnect. The redirect stops and the saved token and frontend account password are forgotten. Revoke the Application Password in your profile, and delete the Worker in Cloudflare under Workers & Pages if you no longer need it.
