Curated resource guide
WordPress REST API Development Resources
Design secure, predictable WordPress REST APIs for integrations, applications, and headless frontends. The resources here cover custom routes and controllers, schemas, validation, permissions, authentication, pagination, custom fields, media, caching, testing, versioning, and client patterns that hold up beyond a basic endpoint demo.
Scope
What this guide covers
- REST API fundamentals
- built-in endpoints
- custom routes and controllers
- namespaces and versioning
- request arguments
- JSON Schema
- validation and sanitization
- permission callbacks
- authentication including cookies, nonces and Application Passwords
- custom fields and register_rest_field
- custom post types and taxonomies
- pagination, filtering and embedding
- media uploads
- users
- batch operations
- error handling
- caching
- CORS
- rate limiting strategies
- webhooks
- headless integrations
- WooCommerce APIs
- testing
- debugging
- security
- backward compatibility
- and API client patterns
Selected references
Curated resources
Links open the original publisher so you can use the complete, current material in context.
- 01Recommended starting point
WordPress REST API Handbook
The main reference for WordPress REST concepts, routes, authentication, schemas, requests, and responses. It is essential when a plugin exposes data or integrates with an external application.
developer.wordpress.org - 02
REST API Key Concepts
Learn routes, endpoints, requests, responses, schemas, links, and discovery before building integrations.
developer.wordpress.org - 03
Extending the REST API
The official guide to adding routes, fields, controllers, schemas, and permission checks.
developer.wordpress.org - 04
Adding Custom REST Endpoints
Register namespaced routes with explicit methods, arguments, validation, and permission callbacks.
developer.wordpress.org - 05
REST API Authentication
Choose supported authentication for same-site, remote, and application-level REST requests.
developer.wordpress.org - 06
REST API Schema
Describe and validate endpoint data with the JSON Schema conventions used by WordPress.
developer.wordpress.org - 07
WordPress Application Passwords
Issue revocable per-application credentials for authenticated API access without sharing account passwords.
developer.wordpress.org - 08
REST API Routes and Endpoints
Design namespaced routes, method-specific endpoints, arguments, callbacks, and permission handling.
developer.wordpress.org - 09
REST API Controller Classes
Structure complex resources around reusable controller conventions rather than disconnected route callbacks.
developer.wordpress.org - 10
Modifying REST API Responses
Expose registered fields and related links without removing Core response data or breaking client expectations.
developer.wordpress.org - 11
REST API Global Parameters
Reduce payload and computation with fields and embedding while handling method overrides and envelopes correctly.
developer.wordpress.org - 12
REST API Pagination
Build bounded collection clients around page headers, limits, ordering, and explicit traversal.
developer.wordpress.org