pushpasharmila

<p><strong>Infospica Headless API</strong> is a WordPress REST API plugin that transforms your WordPress site into a secure, scalable headless CMS with fully isolated custom REST API endpoints.</p>
<p>Build modern frontend applications using Next.js, React, Vue, Angular, or mobile apps — powered by WordPress as a backend API, without touching the default WordPress REST API.</p>
<p><strong>Looking for a secure WordPress REST API plugin for headless CMS?</strong> Infospica Headless API gives you a custom namespace, full CRUD support, ACF field access, and authentication control — all from a clean WordPress admin UI.</p>
<h3>Why use Infospica Headless API?</h3>
<p>Most developers using WordPress as a headless CMS face the same problems: the default REST API exposes too much data publicly, offers no namespace control, and has weak write protection.</p>
<p>Infospica Headless API solves all of that with a dedicated, configurable API layer purpose-built for modern headless WordPress architectures.</p>
<p><strong>Key advantages:</strong></p>
<ul>
<li>Fully isolated API namespace — no interference with default WordPress REST API</li>
<li>Every endpoint requires authentication — no accidental public data exposure</li>
<li>Write operations are locked to WordPress capability checks</li>
<li>Works with any headless frontend: Next.js, Nuxt, React, Vue, Angular, or mobile</li>
</ul>
<h3>Key Features</h3>
<ul>
<li><strong>Custom WordPress REST API namespace</strong> with version control (<code>/wp-json/my-api/v1/</code>)</li>
<li><strong>Full CRUD endpoints</strong> — GET, POST, PUT, PATCH, DELETE</li>
<li><strong>Supports Pages, Posts, and Custom Post Types (CPT)</strong></li>
<li><strong>ACF field support</strong> — include Advanced Custom Fields in API responses</li>
<li><strong>Authentication-aware</strong> — all endpoints require authentication; write operations require capabilities</li>
<li><strong>CSRF protection</strong> — nonce validation enforced for cookie-based authentication</li>
<li><strong>Pagination</strong> — <code>?page</code> and <code>?per_page</code> on all list endpoints (max 50 per page)</li>
<li><strong>WooCommerce-safe</strong> — core WooCommerce pages automatically excluded</li>
<li><strong>Clean admin UI</strong> — manage namespace, version, and enabled content types</li>
<li><strong>Clean uninstall</strong> — removes all plugin options on uninstall</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li><strong>Headless WordPress with Next.js</strong> — fetch posts, pages, and CPTs via secure REST API</li>
<li><strong>WordPress REST API for React or Vue</strong> — isolated namespace, no public data leakage</li>
<li><strong>Mobile app backend</strong> — use WordPress as a content API for iOS or Android apps</li>
<li><strong>SaaS platforms</strong> — use WordPress as a headless CMS for multi-tenant applications</li>
<li><strong>ACF API</strong> — expose Advanced Custom Fields data via authenticated REST endpoints</li>
<li><strong>CPT API</strong> — serve Custom Post Type data to any external frontend or service</li>
</ul>
<h3>Security</h3>
<ul>
<li>All endpoints require authentication — including read (GET) requests</li>
<li>Write operations require WordPress capability checks (<code>edit_posts</code>, <code>delete_posts</code>)</li>
<li>Nonce validation enforced for all cookie-based write requests (CSRF protection)</li>
<li>Email addresses and sensitive user data never included in API responses</li>
<li>WooCommerce core pages (Shop, Cart, Checkout, My Account) excluded automatically</li>
</ul>
<h3>Authentication</h3>
<p>All endpoints require authentication.</p>
<p><strong>Supported methods:</strong></p>
<ul>
<li><strong>Application Passwords</strong> (recommended) — available since WordPress 5.6; generate under Users <span aria-hidden="true" class="wp-exclude-emoji">→</span> Profile and send as Basic Auth header</li>
<li><strong>WordPress login cookies</strong> — for browser or admin usage; write requests require <code>X-WP-Nonce</code> header or <code>_wpnonce</code> parameter</li>
<li>Any authentication method that correctly sets the WordPress user context</li>
</ul>
<p>Write operations are additionally restricted by WordPress user capabilities.</p>
<h3>Available Endpoints</h3>
<p>Base URL structure:</p>
<pre><code>/wp-json/{namespace}/{version}/
</code></pre>
<p>Example:</p>
<pre><code>/wp-json/my-api/v1/
</code></pre>
<h4>Status</h4>
<pre><code>GET /status
</code></pre>
<h4>Pages</h4>
<pre><code>GET /pages
GET /pages/{id}
POST /pages
PUT /pages/{id}
PATCH /pages/{id}
DELETE /pages/{id}
</code></pre>
<h4>Posts</h4>
<pre><code>GET /posts
GET /posts/{id}
POST /posts
PUT /posts/{id}
PATCH /posts/{id}
DELETE /posts/{id}
</code></pre>
<h4>Custom Post Types</h4>
<pre><code>GET /{post-type}
GET /{post-type}/{id}
POST /{post-type}
PUT /{post-type}/{id}
PATCH /{post-type}/{id}
DELETE /{post-type}/{id}<h3>Pagination</h3>
</code></pre>
<p>All list endpoints support pagination parameters:</p>
<pre><code>?page=1&per_page=10 (maximum 50 results per page)
</code></pre>
<p>Example:</p>
<pre><code>/wp-json/my-api/v1/posts?page=2&per_page=5<h3>License</h3>
</code></pre>
<p>This plugin is licensed under GPLv2 or later.<br />
See: https://www.gnu.org/licenses/gpl-2.0.html</p>


Infospica Headless API

WordPress REST API plugin for headless CMS — custom namespace, full CRUD, CPT support, ACF integration, and secure authentication.

icdsoft

madjarov

<p>This plugin helps you to automatically connect your WordPress site to the ICDSoft WordPress MultiManager toolkit available in the ICDSoft Account Panel. The WordPress MultiManager toolkit allows you to add and manage multiple WordPress sites from a single interface.</p>
<p>The WP MultiManager plugin opens the following custom REST-API methods:</p>
<ul>
<li>users/</li>
<li>users/impersonate</li>
<li>users/impersonate/nonce</li>
<li>
<p>users/impersonate/token</p>
</li>
<li>
<p>plugins/</p>
</li>
<li>plugins/upload</li>
<li>plugins/update</li>
<li>
<p>plugins/updates</p>
</li>
<li>
<p>themes/</p>
</li>
<li>themes/installed</li>
<li>themes/install</li>
<li>themes/update</li>
<li>
<p>themes/updates</p>
</li>
<li>
<p>core/</p>
</li>
<li>core/update.</li>
</ul>


MultiManager WP – Manage All Your WordPress Sites Easily

Helps to automatically connect a WordPress site to the ICDSoft WordPress MultiManager tool which allows users to manage multiple WordPress sites from  …

Infospica Headless API vs MultiManager WP – Manage All Your WordPress Sites Easily