WordPress Credential - REST API
What is a WordPress Credential
Section titled “What is a WordPress Credential”A WordPress credential allows your workflows to create, read, update, and delete content on a WordPress site through its REST API. It uses Application Passwords for authentication.
Configuration Fields
Section titled “Configuration Fields”| Field | Description | Example |
|---|---|---|
| Site URL | Full WordPress site URL | https://mysite.com |
| Username | WordPress username | admin |
| App Password | Generated application password | abcd EFGH 1234 ijkl MNOP 5678 |
How to Get the Credentials
Section titled “How to Get the Credentials”Step 1: Verify Requirements
Section titled “Step 1: Verify Requirements”- Your WordPress site must use HTTPS (required for Application Passwords)
- Your WordPress version must be 5.6 or higher
- The REST API must be enabled (it is enabled by default)
Step 2: Generate Application Password
Section titled “Step 2: Generate Application Password”- Log in to your WordPress admin panel (
your-site.com/wp-admin) - Go to Users > Profile
- Scroll down to the Application Passwords section
- In the New Application Password Name field, type a name (e.g., “Floogos”)
- Click Add New Application Password
- Copy the generated password immediately (it won’t be shown again)
Step 3: Configure in Floogos
Section titled “Step 3: Configure in Floogos”- In the Site URL field, enter your site URL without trailing slash (e.g.,
https://mysite.com) - In Username, enter your WordPress username
- In App Password, paste the generated application password
Troubleshooting
Section titled “Troubleshooting”Application Passwords Not Showing
Section titled “Application Passwords Not Showing”- Verify your site uses HTTPS
- Confirm your WordPress version is 5.6 or higher
- Some security plugins may disable this feature
Error 401 Unauthorized
Section titled “Error 401 Unauthorized”- Verify the username and application password are correct
- Confirm the site URL is correct and includes the protocol (https://)
- Ensure the user has sufficient permissions
Error 403 Forbidden
Section titled “Error 403 Forbidden”- The user may not have permissions for the requested action
- Check the user’s role in WordPress (needs to be Editor or Administrator)
REST API Disabled
Section titled “REST API Disabled”- Some security plugins disable the REST API
- Check the security plugin settings and enable access
Security
Section titled “Security”- Use a dedicated user with minimum required permissions
- Do not use the main administrator account for integrations
- Make sure your site uses HTTPS
- Revoke Application Passwords that are no longer in use
- Monitor your WordPress site access logs
- Keep WordPress, themes, and plugins updated