searchfitai

SearchFIT exposes a REST endpoint that lets you create, update, and list posts using an API key. Designed for AI content workflows (ChatGPT, Claude, Perplexity), no-code automation (Zapier, Make, n8n), and headless setups.
<h4>Features</h4>
<ul>
<li>Auto-generated cryptographic API key with one-click regeneration</li>
<li>Create, list, read, and update posts via REST</li>
<li>Slug-based upsert — re-publishing the same slug updates the existing post instead of duplicating</li>
<li>Featured images and inline content images downloaded from URLs you supply</li>
<li>Category and tag management (creates missing categories on the fly)</li>
<li>Custom post meta with a denylist for WordPress-internal keys</li>
<li>SEO meta sync to Yoast SEO, Rank Math, SEOPress, and All in One SEO</li>
<li>Multilingual support via Polylang and WPML</li>
<li>JSON-LD <code><script></code> blocks extracted, validated, and re-emitted in <code><head></code></li>
<li>Optional embed allowlist for YouTube / Vimeo / SoundCloud / Spotify / Loom / TikTok / Apple Podcasts / Dailymotion</li>
<li>Settings UI for default post status, author, category, tags, embeds, hero deduplication</li>
<li>Health check endpoint and activity log</li>
</ul>
<h4>Security</h4>
<ul>
<li>Cryptographic API key (<code>random_bytes</code>) with timing-safe comparison</li>
<li>SSRF guard — outbound URL fetches reject private, loopback, link-local, and reserved IPs (IPv4 and IPv6)</li>
<li>Custom-meta denylist blocks attempts to write <code>_edit_lock</code>, <code>_thumbnail_id</code>, <code>_wp_*</code> and other WP internals</li>
<li>Iframes are off by default; when enabled, restricted to a strict host allowlist and src forced to https</li>
<li>JSON-LD payloads are JSON-validated and re-encoded with <code>JSON_HEX_TAG</code> flags before storage</li>
<li>Settings save flows through the WordPress Settings API (CSRF nonce + sanitize callbacks)</li>
<li>WAF-friendly: auth runs inside handlers (so failed requests don’t trigger Wordfence/Sucuri lockout heuristics); POST-only methods (no PUT/PATCH); public health endpoint</li>
</ul>
<h3>API Reference</h3>
Full docs at <a href="https://searchfit.ai/docs" rel="nofollow ugc">searchfit.ai/docs</a>. Quick example:
<pre><code>curl -X POST "https://yoursite.com/wp-json/searchfit/v1/articles" \
 -H "Content-Type: application/json" \
 -H "X-API-Key: YOUR_API_KEY" \
 -d '{
 "title": "My AI-Generated Article",
 "slug": "my-ai-article",
 "content": "Your content here...",
 "status": "draft",
 "categories": ["AI", "Technology"],
 "tags": ["ai-content", "automation"],
 "meta_description": "Short SEO description.",
 "featured_image_url": "https://example.com/image.jpg"
 }'
</code></pre>
<h3>Privacy Policy</h3>
SearchFIT does not collect or transmit any personal data. API keys and the webhook activity log are stored in the WordPress database and never sent to external servers.

SearchFIT

Secure REST webhook to publish posts to WordPress from AI tools, automation pipelines, or custom apps.

matiasbarrera90

JournalAi enhances WordPress functionality by creating secure REST API endpoints for: 
– Authentication (login and token management). 
– Media uploads and image handling. 
– Blog post creation with metadata. 
– User and category data retrieval.
This plugin integrates with external services to automate blog content creation using: 
1. OpenAI API: For generating text content. 
2. Pexels API: For retrieving high-quality images. 
3. SerpAPI: For performing Google searches.
Note: This plugin is designed specifically for JournalAi’s automation system and may not work independently.
<h3>External Services</h3>
This plugin connects to the following third-party services:
<ol>
<li>
OpenAI API:
<ul>
<li>Purpose: Generates text-based content for blog posts.</li>
<li>Data Sent: Prompts for text generation.</li>
<li>Terms: <a href="https://openai.com/terms" rel="nofollow ugc">OpenAI Terms</a> | <a href="https://openai.com/privacy" rel="nofollow ugc">Privacy Policy</a>.</li>
</ul>
</li>
<li>
Pexels API:
<ul>
<li>Purpose: Fetches royalty-free images for posts.</li>
<li>Data Sent: Search queries for images.</li>
<li>Terms: <a href="https://www.pexels.com/terms-of-service/" rel="nofollow ugc">Pexels Terms</a> | <a href="https://www.pexels.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>.</li>
</ul>
</li>
<li>
SerpAPI:
<ul>
<li>Purpose: Performs Google searches for data enrichment.</li>
<li>Data Sent: Search queries.</li>
<li>Terms: <a href="https://serpapi.com/legal" rel="nofollow ugc">SerpAPI Terms</a> | <a href="https://serpapi.com/security" rel="nofollow ugc">Privacy Policy</a>.</li>
</ul>
</li>
<li>
JournalAi.pro API:
<ul>
<li>Purpose: Backend service for data handling and advanced processing.</li>
<li>Data Sent: User authentication details, blog metadata.</li>
<li>Terms: Refer to <a href="https://journalai.pro/terms" rel="nofollow ugc">JournalAi Terms</a> and <a href="https://journalai.pro/privacy" rel="nofollow ugc">Privacy Policy</a>.</li>
</ul>
</li>
</ol>

JournalAi

JournalAi provides a custom REST API for WordPress, enabling advanced functionality for blog automation and AI integration.

SearchFIT vs JournalAi