Capabilities

---

id: core-capabilities-get owner: core method: GET path: /wp-json/headlesswp/v1/capabilities title: Capabilities usedBySite: true

GET /wp-json/headlesswp/v1/capabilities

Advertises runtime endpoint availability and feature flags for the current environment.

Auth + CSRF

• Auth: public.
• Proxy nonce required: no.
• Notes: this site always calls through /api/secure/**; proxy nonce policy can be stricter than upstream HWP nonce policy metadata.

Request schema

• No request body.
• No query params.

Response schema

{
  "data": {
    "versions": {
      "hwp": "string",
      "wp": "string",
      "woo": "string",
      "wooSubscriptions": "string",
      "affiliatewp": "string"
    },
    "features": {
      "headlessCheckout": "boolean",
      "guestCheckout": "boolean",
      "checkoutCoupons": "boolean",
      "billingPortalSession": "boolean",
      "affiliateTermsGating": "boolean",
      "affiliateStats": "boolean",
      "accountExistenceMode": "explicit | opaque",
      "emailExistsEnabled": "boolean"
    },
    "requiredEndpoints": [
      { "method": "GET", "path": "/me", "owner": "core", "status": "implemented | missing" }
    ],
    "publicEndpoints": [
      { "method": "GET", "path": "/health", "owner": "core", "status": "implemented | missing" }
    ]
  },
  "meta": {
    "timestamp": "ISO-8601",
    "correlationId": "string"
  }
}

Error codes