Built by 
About this software
About StockMeta AI v8 — AI Metadata, SEO & Prompt Suite for Creators
StockMeta AI is a Chrome extension plus a WordPress plugin that writes titles, descriptions, keywords, categories, product listings, alt text, social titles and AI-art prompts for up to 100 images at once, in six modes (Microstock, E-Commerce, POD, Web SEO, Social, AI-art reverse prompt). It fills the Adobe Stock upload form for you, exports a CSV for every major marketplace and writes the metadata into JPEG and PNG files. AI calls use your own free or paid keys (8 built-in providers plus any OpenAI-compatible or local model), so there is no per-image AI cost. The WordPress plugin adds a member portal with a free daily Turbo pass, a Web Batch Studio, Sales Insights and a key vault, and an owner control room with a dashboard, release store, editable prompt engine, telemetry and health check. A guided product tour and one-click demo logins are built in. Full source with Docker Compose, setup guides for Docker and VPS, and PHP and JS tests.
Why StockMeta AI v8 — AI Metadata, SEO & Prompt Suite for Creators
What makes it better
than the alternatives
- 01
Bring your own key
Users store AI keys sealed in the browser; the server never receives or stores them, so there is no per-image AI cost for the owner.
- 02
Six metadata modes
Microstock, E-Commerce, POD, Web SEO, Social and AI-art reverse prompt, driven by a prompt engine and cleaner on the server and offline rules in the extension.
- 03
Admin dashboard and guided tour
The owner gets a WordPress dashboard with live numbers, a 14-day chart and a setup checklist, and every user gets an auto-playing product tour.
- 04
Adobe Stock autopilot
Fills title, keywords, category and file type on Adobe Stock's upload page, with the 21 categories, keyword limits and banned words built in, plus CSV exports and EXIF/IPTC/XMP writing for other agencies.
- 05
Hardened account and token layer
Signed passes, AES-256-GCM answers, CSRF nonce, login lockout, password policy, optional CAPTCHA and rate limits, covered by PHP and JS tests.
Admin Control Room
- Dashboard with KPIs
- 14-day chart and setup checklist
- Extension release ZIP store with update banners
- Editable prompt engine and Adobe selectors
- Turbo pass and member settings
- Telemetry and latest jobs
- Health check
- Password-protected editing
- Built-in admin tour
Onboarding and Demo
- Guided auto-playing product tour with chapters
- One-click demo logins on the sign-in card
- Plain-language setup notices
| Language | Version | Framework | Used for | Share of code |
|---|---|---|---|---|
| JavaScript | — | — | Front-end | 54.3% |
| PHP | — | — | Web, API | 37.6% |
| CSS | — | — | Styling | 6% |
| HTML | — | — | Front-end | 1.4% |
| SQL | — | — | Database | 0.6% |
- Primary language
- PHP 8.3–8.5 (server plugin) and vanilla JavaScript (extension and portal UI, no framework)
- Framework
- WordPress 6.8+ plugin with no PHP or JS framework dependencies (composer.json and package.json declare none)
- Database
- MariaDB 10.11+ or MySQL 8.0+
- Authentication
- WordPress login + signed per-user pass, CSRF nonce, lockout, email verification
- Licence
- Single-site
- Screens
- 16
- Database tables
- 3
- Supported languages
- Interface in English; metadata written in 15 languages (English, Spanish, German, French, Japanese, Arabic and more)
- Browser support
- Extension: Chrome and Edge (Manifest V3). Portal and admin: current Chrome, Edge, Firefox and Safari
| Minimum | Recommended | |
|---|---|---|
| CPU | 1 vCPU | 2 vCPU |
| RAM | 1 GB | 2 GB |
| OS | Linux with Docker, or any OS running PHP 8.3+, WordPress 6.8+ and MariaDB 10.11+ / MySQL 8.0+; Node.js 22+ for build and tests | Linux with Docker, or any OS running PHP 8.3+, WordPress 6.8+ and MariaDB 10.11+ / MySQL 8.0+; Node.js 22+ for build and tests |
| Est. monthly hosting | $3 | $3 |
```bash cp .env.example .env # fill DB_PASSWORD, DB_ROOT_PASSWORD and TSM_CLIENT_REQUEST_CODE in .env TSM_CLIENT_REQUEST_CODE=<your-code> npm run build docker compose up -d # open http://localhost:8080, create the first admin, then activate the plugin ``` Optional demo data (never on a production database): ```bash docker compose --profile demo up -d ```
```bash unzip StockMeta-AI-v8.0.2.zip -d stockmeta && cd stockmeta cp .env.example .env # set WP_HOME and WP_SITEURL to your https domain, then fill the secrets TSM_CLIENT_REQUEST_CODE=<your-code> npm run build docker compose up -d ``` Put a TLS reverse proxy in front of port 8080.
```bash # open the project folder in Claude Code and read AGENTS.md first npm test npm run test:behaviour composer test ```
Quality report
Manually reviewedHow to read the quality report
What this is. Every project on Vibe96 goes through an automated audit of its source code before a reviewer in Dubai checks it by hand. The score is out of 100; 75 is the minimum to be listed, and any single failing check blocks a listing regardless of the score.
- Security
- No real credentials in the code, every data-changing route protected, admin areas role-gated, no SQL built from user input.
- Code structure
- A developer can navigate and extend it: clear module boundaries, no giant files, little copy-paste.
- Docs & completeness
- The setup guide, example config, schema and required files the builder committed to are actually in the archive.
- Dependency health
- Packages pinned, no known critical vulnerabilities, no abandoned libraries in production paths.
- Build & deploy
- A clean machine can restore, build and start it by following the shipped instructions.
Warnings are problems that didn't block the listing; they stay visible here until a later version clears them. The audit reads the code — it does not run it — so always try the live demo before you buy. Lines of code are counted from the same audited archive.
Reviewer notes (4 minor)
Build looks reproducible, but howtosetup.md and build outputs could not be fully verified from the digest; sql access is documented and parameterised, but schema, indexes and several sql files could not be verified; auth layers look solid, but the full route table is not visible so most endpoints could not be verified. None of these stop the software from working; the developer has been told and improvements come in a future update.
Versions & updates
No updates yet. New versions appear here with a changelog.
Buyers receive updates free for 1 year.
What you get
- </>Full source codeThe complete audited source, delivered as a download from your account. No obfuscation.
- ▤DocumentationSetup guide, architecture notes, CLAUDE.md and AGENTS.md.
- ↻One year of updatesEvery new version the builder publishes, free for 12 months.
- ♧30 days of supportInstallation and defect support through Vibe96 tickets.
