OrganicStack Publisher

OrganicStack Publisher provides a comprehensive REST API for automated WordPress content publishing. It enables external applications (including OrganicStack) to publish posts, manage media, handle categories and tags, create authors, and manage content programmatically through a secure API key authentication system.

Key Features

• REST API Endpoints – Complete set of REST API endpoints for WordPress content management
• API Key Authentication – Secure API key-based authentication instead of WordPress application passwords
• Post Publishing – Publish single posts or bulk publish multiple posts at once
• Media Management – Upload images via base64 or URL with automatic optimization
• Category & Tag Management – Get, create, and manage categories and tags
• Author Management – Create authors and manage author profiles with custom avatars
• SEO Support – Built-in support for Yoast SEO and RankMath meta fields
• Custom Meta Fields – Support for custom post meta fields
• CORS Support – Built-in CORS handling for cross-origin requests
• Site Information – Get detailed site information including WordPress version, PHP version, and more

Security Features

• API key authentication with secure key generation
• Input sanitization and validation on all endpoints
• Proper permission checks for all operations
• Secure file upload handling

Data Integrity (Multi-Tenant) – CRITICAL

• Author avatars are time-consuming to create. They MUST NEVER be removed by a plugin update.
• This plugin ONLY manages OrganicStack avatars (organicstack_avatar_id, organicstack_created).
• We NEVER delete, remove, or modify any author/avatar data from WordPress or other plugins.
• Gravatar, Simple Local Avatars, User Avatar, and all other avatar systems are UNTOUCHED.
• See AVATAR_POLICY.md – violating this causes hundreds of lost avatars and customer complaints.

API Documentation

Base URL

All endpoints are available at: /wp-json/organicstack-publisher/v1/

Authentication

Include your API key in requests using either:
* Header: X-API-Key: your-api-key
* Body: {"api_key": "your-api-key"}

Available Endpoints

• GET /ping – Test basic connectivity (no auth required)
• GET /test-connection – Test authenticated connection
• POST /auth – Authenticate with API key
• POST /publish – Publish a single post
• POST /bulk-publish – Publish multiple posts
• POST /upload-media – Upload images
• GET /categories – Get all categories
• GET /tags – Get all tags
• GET /authors – Get all authors
• POST /create-author – Create a new author
• GET /site-info – Get site information

For detailed API documentation, see the admin panel after installation.

Requirements

• WordPress 5.0 or higher
• PHP 7.4 or higher
• MySQL 5.6 or higher
• HTTPS recommended for production use

Support

For support and questions:
* Check WordPress error logs for debugging
* Verify plugin settings in the admin panel
* Test API endpoints using curl or Postman
* Ensure WordPress and PHP versions meet requirements

License

This plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License or any later version.