API endpoints

Customer-facing HeadlessWP Pro REST API docs (core + extensions).

HeadlessWP Pro API docs hub

HeadlessWP Pro is a hardened, versioned REST API facade for WordPress under /wp-json/headlesswp/v1.

For browser usage in this repo, requests must go through the secure proxy path: /api/secure/wp-json/headlesswp/v1/....

Responses follow a consistent envelope:

Success: { data, meta }
Error: { error, meta }

Auth modes in plugin docs include cookie sessions plus optional bearer and service-account API-key modes. If you use cookie sessions, send X-WP-Nonce when required by route policy.

Start here

Endpoint registry
Request Builder
Extensions overview

Contributor security references

/docs/allowlist
/docs/security

Registry source of truth

docs/api/endpoints.ts is the canonical endpoint registry for this docs set. Endpoint detail pages under docs/api/endpoints/*.md should stay aligned to that registry and fixture-verified behavior.