Endpoint registry

Browse the HeadlessWP Pro endpoint catalog by extension owner.

SearchOwner

66 endpoints

Core endpoints

Deactivate account

POST /wp-json/headlesswp/v1/account/deactivate

Core endpoint. HWP nonce policy: logged_in_only.

Affiliate track

POST /wp-json/headlesswp/v1/affiliate/trackUsed by this site

Core endpoint. HWP nonce policy: logged_in_only. Sets AffiliateWP tracking cookies.

Email exists helper

POST /wp-json/headlesswp/v1/auth/email-exists

Core endpoint. HWP nonce policy: logged_in_only.

POST /wp-json/headlesswp/v1/auth/loginUsed by this site

Core endpoint. HWP nonce policy: logged_in_only.

Logout

POST /wp-json/headlesswp/v1/auth/logoutUsed by this site

Core endpoint. HWP nonce policy: logged_in_only.

Password reset request

POST /wp-json/headlesswp/v1/auth/password/forgot

Core endpoint. HWP nonce policy: never.

Password reset

POST /wp-json/headlesswp/v1/auth/password/reset

Core endpoint. HWP nonce policy: never.

Password setup

POST /wp-json/headlesswp/v1/auth/password/set

Core endpoint. HWP nonce policy: logged_in_only.

Password setup validate

POST /wp-json/headlesswp/v1/auth/password/set/validate

Core endpoint. HWP nonce policy: logged_in_only.

POST /wp-json/headlesswp/v1/auth/registerUsed by this site

Core endpoint. HWP nonce policy: always.

SSO callback

POST /wp-json/headlesswp/v1/auth/sso/callback

Core endpoint. HWP nonce policy: always.

SSO provider discovery

GET /wp-json/headlesswp/v1/auth/sso/providers

Core endpoint. HWP nonce policy: never.

Issue token

POST /wp-json/headlesswp/v1/auth/token

Core endpoint. HWP nonce policy: logged_in_only.

Revoke token

POST /wp-json/headlesswp/v1/auth/token/revoke

Core endpoint. HWP nonce policy: logged_in_only.

Verify email

POST /wp-json/headlesswp/v1/auth/verify-email

Core endpoint. HWP nonce policy: always.

Billing portal session

POST /wp-json/headlesswp/v1/billing/portal-sessionUsed by this site

Core endpoint. HWP nonce policy: logged_in_only.

Capabilities

GET /wp-json/headlesswp/v1/capabilitiesUsed by this site

Core endpoint. HWP nonce policy: never.

Config app

GET /wp-json/headlesswp/v1/config/app

Core endpoint. HWP nonce policy: never.

Funnel content snapshot

GET /wp-json/headlesswp/v1/content/funnel

Core endpoint. HWP nonce policy: never.

Content menu

GET /wp-json/headlesswp/v1/content/menus/(?P<location>[\w-]+)

Core endpoint. HWP nonce policy: never.

Content pages

GET /wp-json/headlesswp/v1/content/pages

Core endpoint. HWP nonce policy: never.

Content page detail

GET /wp-json/headlesswp/v1/content/pages/(?P<idOrSlug>[\w-]+)

Core endpoint. HWP nonce policy: never.

Frontend bootstrap

GET /wp-json/headlesswp/v1/frontend/bootstrap

Core endpoint. HWP nonce policy: never.

Health

GET /wp-json/headlesswp/v1/health

Core endpoint. HWP nonce policy: never.

Current user

GET /wp-json/headlesswp/v1/meUsed by this site

Core endpoint. HWP nonce policy: logged_in_only.

Update profile

PATCH /wp-json/headlesswp/v1/me/profileUsed by this site

Core endpoint. HWP nonce policy: logged_in_only.

Session listing

GET /wp-json/headlesswp/v1/me/sessions

Core endpoint. HWP nonce policy: never.

Revoke sessions

POST /wp-json/headlesswp/v1/me/sessions/revoke

Core endpoint. HWP nonce policy: logged_in_only.

Protected media download

GET /wp-json/headlesswp/v1/media/download/(?P<resourceKey>.+)

Core endpoint. HWP nonce policy: never.

Protected media stream

GET /wp-json/headlesswp/v1/media/stream/(?P<token>[A-Za-z0-9\._-]+)

Core endpoint. HWP nonce policy: never.

Nonce

GET /wp-json/headlesswp/v1/nonceUsed by this site

Core endpoint. HWP nonce policy: never.

WooCommerce endpoints

Woo orders

GET /wp-json/headlesswp/v1/ordersUsed by this site

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Checkout session

POST /wp-json/headlesswp/v1/store/checkout-sessionUsed by this site

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Storefront offers

GET /wp-json/headlesswp/v1/store/offersUsed by this site

WooCommerce extension endpoint. HWP nonce policy: never.

Storefront products

GET /wp-json/headlesswp/v1/store/products

WooCommerce extension endpoint. HWP nonce policy: never.

Storefront product detail

GET /wp-json/headlesswp/v1/store/products/(?P<productIdOrSlug>[\\w-]+)

WooCommerce extension endpoint. HWP nonce policy: never.

Store API cart

GET /wp-json/headlesswp/v1/store/wc/cartUsed by this site

WooCommerce extension endpoint. HWP nonce policy: never.

Store API cart add item

POST /wp-json/headlesswp/v1/store/wc/cart/add-itemUsed by this site

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API cart apply coupon

POST /wp-json/headlesswp/v1/store/wc/cart/apply-couponUsed by this site

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API cart remove coupon

POST /wp-json/headlesswp/v1/store/wc/cart/remove-couponUsed by this site

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API cart remove item

POST /wp-json/headlesswp/v1/store/wc/cart/remove-item

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API cart select shipping rate

POST /wp-json/headlesswp/v1/store/wc/cart/select-shipping-rate

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API cart shipping rates

GET /wp-json/headlesswp/v1/store/wc/cart/shipping-rates

WooCommerce extension endpoint. HWP nonce policy: never.

Store API cart update customer

POST /wp-json/headlesswp/v1/store/wc/cart/update-customer

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API cart update item

POST /wp-json/headlesswp/v1/store/wc/cart/update-item

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API checkout

GET /wp-json/headlesswp/v1/store/wc/checkout

WooCommerce extension endpoint. HWP nonce policy: never.

Store API checkout submit

POST /wp-json/headlesswp/v1/store/wc/checkout

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

Store API payment methods

GET /wp-json/headlesswp/v1/store/wc/payment-methods

WooCommerce extension endpoint. HWP nonce policy: never.

Woo subscriptions

GET /wp-json/headlesswp/v1/subscriptionsUsed by this site

WooCommerce extension endpoint. HWP nonce policy: logged_in_only.

AffiliateWP endpoints

Affiliate accept terms

POST /wp-json/headlesswp/v1/affiliates/accept-termsUsed by this site

AffiliateWP extension endpoint. HWP nonce policy: logged_in_only.

Affiliate apply

POST /wp-json/headlesswp/v1/affiliates/applyUsed by this site

AffiliateWP extension endpoint. HWP nonce policy: logged_in_only.

Affiliate profile

GET /wp-json/headlesswp/v1/affiliates/meUsed by this site

AffiliateWP extension endpoint. HWP nonce policy: logged_in_only.

Affiliate referrals

GET /wp-json/headlesswp/v1/affiliates/referralsUsed by this site

AffiliateWP extension endpoint. HWP nonce policy: logged_in_only.

Affiliate stats

GET /wp-json/headlesswp/v1/affiliates/statsUsed by this site

AffiliateWP extension endpoint. HWP nonce policy: logged_in_only.

Affiliate terms

GET /wp-json/headlesswp/v1/affiliates/termsUsed by this site

AffiliateWP extension endpoint. HWP nonce policy: logged_in_only.

Restrict Content Pro endpoints

RCP memberships

GET /wp-json/headlesswp/v1/memberships

Restrict Content Pro extension endpoint. Lists memberships for the current user.

RCP membership tiers

GET /wp-json/headlesswp/v1/store/membership-tiers

Restrict Content Pro extension endpoint. Public tier listing; may return DEPENDENCY_UNAVAILABLE when RCP is missing.

FluentBooking endpoints

Booking availability

GET /wp-json/headlesswp/v1/bookings/availability

FluentBooking extension endpoint. Public route; not WP nonce-based. Manage actions rely on X-HeadlessWP-Bookings-Manage-Token for logged-out users.

Cancel booking

POST /wp-json/headlesswp/v1/bookings/{bookingId}/cancel

FluentBooking extension endpoint. Public route; not WP nonce-based. Logged-out booking management requires X-HeadlessWP-Bookings-Manage-Token.

Bookings catalog

GET /wp-json/headlesswp/v1/bookings/catalog

FluentBooking extension endpoint. Public route; not WP nonce-based. Manage actions rely on X-HeadlessWP-Bookings-Manage-Token for logged-out users.

Create booking

POST /wp-json/headlesswp/v1/bookings

FluentBooking extension endpoint. Public route; not WP nonce-based. Guest responses may include manageToken for follow-up manage actions.

Booking detail

GET /wp-json/headlesswp/v1/bookings/{bookingId}

FluentBooking extension endpoint. Public route; not WP nonce-based. Logged-out booking management requires X-HeadlessWP-Bookings-Manage-Token.

Bookings provider

GET /wp-json/headlesswp/v1/bookings/provider

FluentBooking extension endpoint. Public route; not WP nonce-based. Manage actions rely on X-HeadlessWP-Bookings-Manage-Token for logged-out users.

Reschedule booking

POST /wp-json/headlesswp/v1/bookings/{bookingId}/reschedule

FluentBooking extension endpoint. Public route; not WP nonce-based. Logged-out booking management requires X-HeadlessWP-Bookings-Manage-Token.

Booking types

GET /wp-json/headlesswp/v1/bookings/types

FluentBooking extension endpoint. Public route; not WP nonce-based. Manage actions rely on X-HeadlessWP-Bookings-Manage-Token for logged-out users.

Booking type detail

GET /wp-json/headlesswp/v1/bookings/types/{typeId}

FluentBooking extension endpoint. Public route; not WP nonce-based. Manage actions rely on X-HeadlessWP-Bookings-Manage-Token for logged-out users.