GymGrow Connect adds a small set of secure REST API endpoints under the gymgrow/v1 namespace so an external system (for example, an AI content pipeline) can:

Create or update a post — title, content, excerpt, slug, categories, tags, schedule date — in a single request.
Set SEO fields (SEO title, meta description, focus keyword, canonical URL, robots) on the same request or on an existing post. The active SEO plugin is auto-detected: RankMath or Yoast SEO.
Upload an image from a multipart file or a remote URL, set its alt text, and optionally assign it as the featured image.

It replaces ad-hoc functions.php snippets with a versioned, capability-checked plugin.

Endpoints

POST /wp-json/gymgrow/v1/article — publish/update an article (also sets SEO and featured image).
POST /wp-json/gymgrow/v1/media — upload an image.
POST /wp-json/gymgrow/v1/seo/{id} — update SEO fields for a post (RankMath or Yoast, whichever is active).

A backward-compatible alias POST /wp-json/custom/v1/rankmath/{id} is also registered for pipelines that used the legacy route.

Authentication

Requests are authenticated with the plugin’s own API key, sent in the X-GymGrow-Key header. The key is generated automatically on activation and shown under Settings GymGrow Connect. A valid key authorises publish, upload and SEO requests directly — no WordPress username or Application Password is required. (Requests from a logged-in user with the right capabilities still work as a fallback.)

This plugin does not call any external services and stores no personal data.