OrganicStack Publisher

OrganicStack Publisher provides a comprehensive REST API for automated WordPress content publishing. It enables external applications (including OrganicStack) to publish posts, manage media, handle categories and tags, create authors, and manage content programmatically through a secure API key authentication system.

Key Features

• REST API Endpoints – Complete set of REST API endpoints for WordPress content management
• API Key Authentication – Secure API key-based authentication instead of WordPress application passwords
• Post Publishing – Publish single posts or bulk publish multiple posts at once
• Media Management – Upload images via base64 or URL with automatic optimization
• Category & Tag Management – Get, create, and manage categories and tags
• Author Management – Create authors and manage author profiles with custom avatars
• SEO Support – Built-in support for Yoast SEO and RankMath meta fields
• Custom Meta Fields – Support for custom post meta fields
• CORS Support – Built-in CORS handling for cross-origin requests
• Site Information – Get detailed site information including WordPress version, PHP version, and more

Security Features

• API key authentication with secure key generation
• Input sanitization and validation on all endpoints
• Proper permission checks for all operations
• Secure file upload handling

Data Integrity (Multi-Tenant) – CRITICAL

• Author avatars are time-consuming to create. They MUST NEVER be removed by a plugin update.
• This plugin ONLY manages OrganicStack avatars (organicstack_avatar_id, organicstack_created).
• We NEVER delete, remove, or modify any author/avatar data from WordPress or other plugins.
• Gravatar, Simple Local Avatars, User Avatar, and all other avatar systems are UNTOUCHED.
• See AVATAR_POLICY.md – violating this causes hundreds of lost avatars and customer complaints.

API Documentation

Base URL

All endpoints are available at: /wp-json/organicstack-publisher/v1/

Authentication

Include your API key in requests using either:
* Header: X-API-Key: your-api-key
* Body: {"api_key": "your-api-key"}

Available Endpoints

• GET /ping – Test basic connectivity (no auth required)
• GET /test-connection – Test authenticated connection
• POST /auth – Authenticate with API key
• POST /publish – Publish a single post
• POST /bulk-publish – Publish multiple posts
• POST /upload-media – Upload images
• GET /categories – Get all categories
• GET /tags – Get all tags
• GET /authors – Get all authors
• POST /create-author – Create a new author
• GET /site-info – Get site information

For detailed API documentation, see the admin panel after installation.

Requirements

• WordPress 5.0 or higher
• PHP 7.4 or higher
• MySQL 5.6 or higher
• HTTPS recommended for production use

Support

For support and questions:
* Check WordPress error logs for debugging
* Verify plugin settings in the admin panel
* Test API endpoints using curl or Postman
* Ensure WordPress and PHP versions meet requirements

License

This plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License or any later version.

Manual Installation

1. Download the plugin files
2. Upload the organicstack-publisher folder to the /wp-content/plugins/ directory
3. Activate the plugin through the ‘Plugins’ menu in WordPress
4. Navigate to OrganicStack in the WordPress admin menu
5. Copy your generated API key for use in your application

ZIP Upload

1. Create a ZIP file of the plugin directory
2. Go to Plugins → Add New → Upload Plugin in WordPress admin
3. Upload the ZIP file and activate
4. Configure your API key in OrganicStack Publisher settings

What is this plugin for?

This plugin provides a REST API for automated WordPress content publishing, allowing external applications to manage WordPress content programmatically.

How do I authenticate?

The plugin generates an API key automatically upon activation. Use this key in the X-API-Key header or in the request body as api_key for all authenticated requests.

What endpoints are available?

The plugin provides endpoints for:
* Testing connection (/ping, /test-connection)
* Publishing posts (/publish, /bulk-publish)
* Media upload (/upload-media)
* Category and tag management (/categories, /tags)
* Author management (/authors, /create-author)
* Site information (/site-info)

Does this work with SEO plugins?

Yes, the plugin supports Yoast SEO and RankMath meta fields including meta descriptions and titles.

Can I upload images?

Yes, you can upload images via base64 encoding or by providing a URL. The plugin handles image optimization automatically.

Is this secure?

Yes, all endpoints use API key authentication, and all inputs are sanitized and validated according to WordPress security standards.

1.0.5

• Removal of uneeded author utils

1.0.4

• Authors endpoints now return only users with Author role (excludes administrator and editor)
• Uses role__in and role__not_in for strict role filtering

1.0.3

• Removed destructive avatar meta cleanup – plugin no longer deletes organicstack_avatar_id under any circumstances; avatars stay untouched regardless of plugin updates

1.0.2

• Added option to schedule posts from manual generator

1.0.1

• Fixed avatar compatibility issue – plugin now properly preserves avatars from third-party plugins (Simple Local Avatars, User Avatar, etc.)
• Improved avatar filter to only process users with OrganicStack avatars, preventing interference with existing author avatars
• Added automatic cleanup of invalid avatar attachment references
• Enhanced compatibility with WordPress default Gravatar system
• Fixed issue where pre-existing authors lost their avatars after plugin installation

1.0.0

• Initial release
• Custom REST API endpoints
• API key authentication
• Post publishing functionality
• Media upload support
• Category and tag management
• Author management
• SEO meta field support
• Admin settings page