WordPress REST API

The WordPress REST API provides routes such as /wp-json/wp/v2/posts for reading site content and, when authorized, creating or updating supported resources. A route identifies a resource path; its endpoints support particular operations, such as GET for reading and POST for creating. This makes it useful for mobile apps, external dashboards, editorial workflows and headless WordPress front ends.

Publicly available content can often be read without a login, but modifying posts or accessing protected data requires authentication and appropriate WordPress capabilities. A custom integration should use supported authentication methods, restrict permissions and validate every submitted value. The presence of an API does not mean anyone should be able to change the site.

The REST API differs from a WordPress plugin: it is an interface for exchanging data, whereas a plugin is a package that extends WordPress behavior. Before building an integration, inspect the site’s API index, installed plugin endpoints, privacy exposure, caching rules and rate or access controls.