WordPress REST API Reference
Authentication
Application Password (Recommended)
- Go to WordPress Admin → Users → Profile
- Scroll to "Application Passwords"
- Enter name, click "Add New Application Password"
- Copy password and REMOVE ALL SPACES
WordPress shows: cUAn CKZ1 u5DN IkpS bMra FCWL
Must use: cUAnCKZ1u5DNIkpSbMraFCWL
HTTP Basic Auth
const auth = btoa(`${username}:${passwordNoSpaces}`);
fetch(url, {
headers: {
'Authorization': `Basic ${auth}`
}
});
API Endpoints
Base: https://your-site.com/wp-json/wp/v2
Posts
| Method |
Endpoint |
Description |
| GET |
/posts |
List posts |
| GET |
/posts/{id} |
Get single post |
| POST |
/posts |
Create post |
| PUT |
/posts/{id} |
Update post |
| DELETE |
/posts/{id} |
Delete post |
Pages
| Method |
Endpoint |
Description |
| GET |
/pages |
List pages |
| GET |
/pages/{id} |
Get single page |
| POST |
/pages |
Create page |
| PUT |
/pages/{id} |
Update page |
| DELETE |
/pages/{id} |
Delete page |
Media
| Method |
Endpoint |
Description |
| GET |
/media |
List media |
| GET |
/media/{id} |
Get single media |
| POST |
/media |
Upload media |
| DELETE |
/media/{id} |
Delete media |
Request Parameters
Pagination
?per_page=10&page=1
Filtering
?status=publish
?search=keyword
?categories=1,2,3
Ordering
?orderby=date&order=desc
Response Format
Post Object
{
"id": 123,
"date": "2024-01-01T12:00:00",
"title": { "rendered": "Post Title" },
"content": { "rendered": "<p>Content</p>" },
"excerpt": { "rendered": "<p>Excerpt</p>" },
"status": "publish",
"link": "https://site.com/post-slug/",
"featured_media": 0
}
Media Object
{
"id": 456,
"date": "2024-01-01T12:00:00",
"title": { "rendered": "Image Title" },
"source_url": "https://site.com/wp-content/uploads/image.jpg",
"media_type": "image",
"mime_type": "image/jpeg"
}
Common Errors
401 Unauthorized
- Application Password has spaces → Remove all spaces
- Wrong username → Check username (not email)
- Password revoked → Generate new Application Password
403 Forbidden
- User lacks capability → Check user role
- REST API disabled → Check site settings
404 Not Found
- Wrong endpoint → Check URL structure
- Post doesn't exist → Verify ID
Upload Media
From URL
// 1. Fetch image from URL
const response = await fetch(imageUrl);
const blob = await response.blob();
// 2. Upload to WordPress
const formData = new FormData();
formData.append('file', blob, 'filename.jpg');
await fetch(`${wpUrl}/wp-json/wp/v2/media`, {
method: 'POST',
headers: { 'Authorization': `Basic ${auth}` },
body: formData
});
From Base64
// 1. Convert base64 to blob
const binary = atob(base64Data);
const bytes = new Uint8Array(binary.length);
for (let i = 0; i < binary.length; i++) {
bytes[i] = binary.charCodeAt(i);
}
const blob = new Blob([bytes], { type: mimeType });
// 2. Upload to WordPress
const formData = new FormData();
formData.append('file', blob, fileName);
// ... same as above
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
tomevault-io