# API Conventions

> REST API conventions for WordPress MCP SaaS Use when this capability is needed.

- Skill: `tomevault-io/api-conventions-2` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/api-conventions-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/api-conventions-2/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/api-conventions-2

---


# API Conventions

## Authentication Headers

### JWT (Dashboard)
```
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
```

### API Key (MCP Clients)
```
Authorization: Bearer n2f_xxxxxxxxxxxxx
```

### WordPress Credentials (Multi-tenant)
```
x-wordpress-url: https://wp.example.com
x-wordpress-username: admin
x-wordpress-password: ApplicationPasswordNoSpaces
```

## Response Format

### Success
```json
{
  "success": true,
  "data": { ... }
}
```

### Error
```json
{
  "success": false,
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Title is required"
  }
}
```

## HTTP Status Codes

| Status | Meaning |
|--------|---------|
| 200 | Success |
| 201 | Created |
| 400 | Bad Request |
| 401 | Unauthorized |
| 403 | Forbidden |
| 404 | Not Found |
| 429 | Rate Limited |
| 500 | Internal Error |

## WordPress-Specific Errors

| Code | Description |
|------|-------------|
| `WP_AUTH_FAILED` | WordPress authentication failed |
| `WP_NOT_FOUND` | WordPress resource not found |
| `WP_API_ERROR` | WordPress API returned error |
| `APP_PASSWORD_FORMAT` | Application Password has spaces |

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/kaewz-manga) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-13 -->