{"id":335771,"date":"2026-07-17T09:58:18","date_gmt":"2026-07-17T09:58:18","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/restful-json-api\/"},"modified":"2026-07-17T09:57:58","modified_gmt":"2026-07-17T09:57:58","slug":"restful-json-api","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/restful-json-api\/","author":71405,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"0.15.7","stable_tag":"0.15.7","tested":"7.0.2","requires":"5.0","requires_php":"7.4","requires_plugins":null,"header_name":"RESTful JSON API","header_author":"Ali Qureshi","header_description":"A RESTful JSON API for WordPress with JWT authentication, read-only content endpoints, user profiles, user meta, widgets, comments, API-key protection, and HTTPS enforcement. Post write endpoints are available in Pro.","assets_banners_color":"c9e6f5","last_updated":"2026-07-17 09:57:58","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/www.parorrey.com\/donate\/","header_plugin_uri":"https:\/\/wordpress.org\/plugins\/restful-json-api\/","header_author_uri":"https:\/\/www.parorrey.com\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":28,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"0.15.7":{"tag":"0.15.7","author":"parorrey","date":"2026-07-17 09:57:58"}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.gif":{"filename":"icon-128x128.gif","revision":3611279,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.gif":{"filename":"icon-256x256.gif","revision":3611279,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3611279,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3611279,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.15.7"],"block_files":[],"assets_screenshots":{"screenshot-1.jpg":{"filename":"screenshot-1.jpg","revision":3611279,"resolution":"1","location":"assets","locale":"","width":1200,"height":1057},"screenshot-2.jpg":{"filename":"screenshot-2.jpg","revision":3611279,"resolution":"2","location":"assets","locale":"","width":1200,"height":922},"screenshot-3.jpg":{"filename":"screenshot-3.jpg","revision":3611279,"resolution":"3","location":"assets","locale":"","width":1200,"height":570},"screenshot-4.jpg":{"filename":"screenshot-4.jpg","revision":3611279,"resolution":"4","location":"assets","locale":"","width":1200,"height":801}},"screenshots":[]},"plugin_section":[],"plugin_tags":[1556,1118,38851,841,2299],"plugin_category":[],"plugin_contributors":[80992],"plugin_business_model":[],"class_list":["post-335771","plugin","type-plugin","status-publish","hentry","plugin_tags-api","plugin_tags-json","plugin_tags-jwt","plugin_tags-mobile","plugin_tags-rest","plugin_contributors-parorrey","plugin_committers-parorrey"],"banners":{"banner":"https:\/\/ps.w.org\/restful-json-api\/assets\/banner-772x250.png?rev=3611279","banner_2x":"https:\/\/ps.w.org\/restful-json-api\/assets\/banner-1544x500.png?rev=3611279","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/restful-json-api\/assets\/icon-128x128.gif?rev=3611279","icon_2x":"https:\/\/ps.w.org\/restful-json-api\/assets\/icon-256x256.gif?rev=3611279","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/restful-json-api\/assets\/screenshot-1.jpg?rev=3611279","caption":""},{"src":"https:\/\/ps.w.org\/restful-json-api\/assets\/screenshot-2.jpg?rev=3611279","caption":""},{"src":"https:\/\/ps.w.org\/restful-json-api\/assets\/screenshot-3.jpg?rev=3611279","caption":""},{"src":"https:\/\/ps.w.org\/restful-json-api\/assets\/screenshot-4.jpg?rev=3611279","caption":""}],"raw_content":"<!--section=description-->\n<p>RESTful JSON API provides simple JSON endpoints for WordPress content and user-facing app workflows. It is designed for mobile apps, external tools, and lightweight integrations that need predictable JSON responses from WordPress.<\/p>\n\n<p>Built-in features include:<\/p>\n\n<ul>\n<li>Core endpoints for pages, search, indexes, menus, and API metadata.<\/li>\n<li>Posts controller endpoints for read-only post lists, single posts, CPT discovery, custom taxonomies, taxonomy terms\/posts, media, attachments, comments, date archives, category archives, tag archives, and author archives.<\/li>\n<li>Comment submission endpoints.<\/li>\n<li>Widget\/sidebar retrieval endpoints.<\/li>\n<li>User signup, login, token validation, current-user profile, avatars, password reset requests, user meta, and authenticated comments.<\/li>\n<li>Plugin-issued JWT bearer tokens for protected endpoints.<\/li>\n<li>Optional shared API-key protection.<\/li>\n<li>CORS allowed-origin settings.<\/li>\n<li>HTTPS enforcement for password and bearer-token requests, enabled by default.<\/li>\n<\/ul>\n\n<p>Full endpoint documentation with sample code is available in Settings &gt; RESTful JSON API &gt; Documentation. The same long-form documentation is also included in <code>readme.md<\/code> inside the plugin package.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>restful-json-api<\/code> folder to <code>\/wp-content\/plugins\/<\/code>.<\/li>\n<li>Activate the plugin from the WordPress Plugins screen.<\/li>\n<li>Open Settings &gt; RESTful JSON API.<\/li>\n<li>Configure the API base path, optional API key, CORS origins, HTTPS requirement, and enabled controllers.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"how%20do%20clients%20authenticate%3F\"><h3>How do clients authenticate?<\/h3><\/dt>\n<dd><p>Clients call the User controller login endpoint with a username and password over HTTPS. The response includes a plugin-issued JWT. Protected endpoints require <code>Authorization: Bearer ACCESS_TOKEN<\/code>.<\/p><\/dd>\n<dt id=\"do%20users%20need%20wordpress%20application%20passwords%3F\"><h3>Do users need WordPress Application Passwords?<\/h3><\/dt>\n<dd><p>No. This plugin uses JWT authentication, so users do not need to manually create Application Passwords.<\/p><\/dd>\n<dt id=\"is%20https%20required%3F\"><h3>Is HTTPS required?<\/h3><\/dt>\n<dd><p>HTTPS is required by default for password and bearer-token requests. Site owners can disable this in Settings &gt; RESTful JSON API for local or non-SSL environments, but production sites should keep it enabled.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20still%20use%20authentication%20cookies%3F\"><h3>Does the plugin still use authentication cookies?<\/h3><\/dt>\n<dd><p>No. Cookie-based authentication endpoints were removed. Use JWT bearer tokens instead.<\/p><\/dd>\n<dt id=\"where%20are%20the%20endpoint%20examples%3F\"><h3>Where are the endpoint examples?<\/h3><\/dt>\n<dd><p>Open Settings &gt; RESTful JSON API &gt; Documentation for login, token validation, post create\/update\/delete, user meta, comment, and controller examples. The same documentation is also included in <code>readme.md<\/code>.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>0.15.7 (2026-07-15):<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"40 JSON API endpoints for WordPress content, CPTs, taxonomies, media, comments, widgets, users, JWT login, API keys, CORS, and HTTPS.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/335771","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=335771"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/parorrey"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=335771"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=335771"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=335771"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=335771"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=335771"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=335771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}