WordPress

WordPress.com API integration with managed OAuth. Manage posts, pages, sites, and content. Use this skill when users want to create, read, update, or delete WordPress.com posts, pages, or manage site content. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

Audits

Pass

ClawScanPass

Agentic behavior and permission review.

Static analysisPass

Pattern checks against bundled files.

VirusTotalPass

Multi-engine malware detections and file reputation.

Install

openclaw skills install wordpress-api

WordPress.com

Access the WordPress.com REST API with managed OAuth authentication. Create and manage posts, pages, and site content on WordPress.com hosted sites.

Quick Start

# List posts from a site
python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://api.maton.ai/wordpress/rest/v1.1/sites/{site_id}/posts?number=10')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Base URL

https://api.maton.ai/wordpress/rest/v1.1/{endpoint}

Maton proxies requests to public-api.wordpress.com and automatically injects your OAuth token.

Note: WordPress.com uses the REST v1.1 API. Site-specific endpoints use the pattern /sites/{site_id_or_domain}/{resource}.

Authentication

All requests require the Maton API key in the Authorization header:

Authorization: Bearer $MATON_API_KEY

Environment Variable: Set your API key as MATON_API_KEY:

export MATON_API_KEY="YOUR_API_KEY"

Getting Your API Key

Sign in or create an account at maton.ai
Go to maton.ai/settings
Copy your API key

Connection Management

Manage your WordPress.com OAuth connections at https://api.maton.ai.

List Connections

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://api.maton.ai/connections?app=wordpress&status=ACTIVE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Create Connection

python <<'EOF'
import urllib.request, os, json
data = json.dumps({'app': 'wordpress'}).encode()
req = urllib.request.Request('https://api.maton.ai/connections', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Get Connection

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://api.maton.ai/connections/{connection_id}')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Response:

{
  "connection": {
    "connection_id": "{connection_id}",
    "status": "ACTIVE",
    "creation_time": "2026-02-10T07:46:26.908898Z",
    "last_updated_time": "2026-02-10T07:49:33.440422Z",
    "url": "https://connect.maton.ai/?session_token=...",
    "app": "wordpress",
    "metadata": {}
  }
}

Open the returned url in a browser to complete OAuth authorization.

Delete Connection

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://api.maton.ai/connections/{connection_id}', method='DELETE')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Specifying Connection

If you have multiple WordPress.com connections, specify which one to use with the Maton-Connection header:

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://api.maton.ai/wordpress/rest/v1.1/sites/{site_id}/posts')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Maton-Connection', '{connection_id}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

If you have multiple connections, always include this header to ensure requests go to the intended account.

Security & Permissions

Access is scoped to posts, pages, sites, and content within the connected WordPress.com account.
All write operations require explicit user approval. Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.

API Reference

Sites

Get Site Information

GET /wordpress/rest/v1.1/sites/{site_id_or_domain}

Response:

{
  "ID": 252505333,
  "name": "My Blog",
  "description": "Just another WordPress.com site",
  "URL": "https://myblog.wordpress.com",
  "capabilities": {
    "edit_pages": true,
    "edit_posts": true,
    "edit_others_posts": true,
    "delete_posts": true
  }
}

The site identifier can be either:

Numeric site ID (e.g., 252505333)
Domain name (e.g., myblog.wordpress.com or en.blog.wordpress.com)

Posts

List Posts

GET /wordpress/rest/v1.1/sites/{site}/posts

Query Parameters:

number - Number of posts to return (default: 20, max: 100)
offset - Offset for pagination
page - Page number
page_handle - Cursor for pagination (from response meta.next_page)
order - Sort order: DESC or ASC
order_by - Sort field: date, modified, title, comment_count, ID
status - Post status: publish, draft, pending, private, future, trash, any
type - Post type: post, page, any
search - Search term
category - Category slug
tag - Tag slug
author - Author ID
fields - Comma-separated list of fields to return

Response:

{
  "found": 150,
  "posts": [
    {
      "ID": 83587,
      "site_ID": 3584907,
      "author": {
        "ID": 257479511,
        "login": "username",
        "name": "John Doe"
      },
      "date": "2026-02-09T15:00:00+00:00",
      "modified": "2026-02-09T16:30:00+00:00",
      "title": "My Post Title",
      "excerpt": "<p>Post excerpt...</p>",
      "content": "<p>Full post content...</p>",
      "slug": "my-post-title",
      "status": "publish",
      "type": "post",
      "categories": {...},
      "tags": {...}
    }
  ],
  "meta": {
    "next_page": "value=2026-02-09T15%3A00%3A00%2B00%3A00&id=83587"
  }
}

Get Post

GET /wordpress/rest/v1.1/sites/{site}/posts/{post_id}

Response:

{
  "ID": 83587,
  "site_ID": 3584907,
  "author": {...},
  "date": "2026-02-09T15:00:00+00:00",
  "title": "My Post Title",
  "content": "<p>Full post content...</p>",
  "slug": "my-post-title",
  "status": "publish",
  "type": "post",
  "categories": {
    "news": {
      "ID": 123,
      "name": "News",
      "slug": "news"
    }
  },
  "tags": {
    "featured": {
      "ID": 456,
      "name": "Featured",
      "slug": "featured"
    }
  }
}

Create Post

POST /wordpress/rest/v1.1/sites/{site}/posts/new
Content-Type: application/json

{
  "title": "New Post Title",
  "content": "<p>Post content here...</p>",
  "status": "draft",
  "categories": "news, updates",
  "tags": "featured, important"
}

Parameters:

title - Post title (required)
content - Post content (HTML)
excerpt - Post excerpt
status - publish, draft, pending, private, future
date - Post date (ISO 8601)
categories - Comma-separated category names or slugs
tags - Comma-separated tag names or slugs
format - Post format: standard, aside, chat, gallery, link, image, quote, status, video, audio
slug - URL slug
featured_image - Featured image attachment ID
sticky - Whether post is sticky (boolean)
password - Password to protect post

Response:

{
  "ID": 123,
  "site_ID": 252505333,
  "title": "New Post Title",
  "status": "draft",
  "date": "2026-02-10T09:50:35+00:00"
}

Update Post

POST /wordpress/rest/v1.1/sites/{site}/posts/{post_id}
Content-Type: application/json

{
  "title": "Updated Title",
  "content": "<p>Updated content...</p>"
}

Uses the same parameters as Create Post.

Delete Post

POST /wordpress/rest/v1.1/sites/{site}/posts/{post_id}/delete

Moves post to trash. Returns the deleted post with status: "trash".

Pages

Pages use the same endpoints as posts with type=page:

List Pages

GET /wordpress/rest/v1.1/sites/{site}/posts?type=page

Create Page

POST /wordpress/rest/v1.1/sites/{site}/posts/new?type=page
Content-Type: application/json

{
  "title": "About Us",
  "content": "<p>About page content...</p>",
  "status": "publish"
}

Get Page Dropdown List

GET /wordpress/rest/v1.1/sites/{site}/dropdown-pages/

Returns a simplified list of pages for dropdowns/menus.

Get Page Templates

GET /wordpress/rest/v1.1/sites/{site}/page-templates

Returns available page templates for the site's theme.

Post Likes

Get Post Likes

GET /wordpress/rest/v1.1/sites/{site}/posts/{post_id}/likes

Response:

{
  "found": 99,
  "i_like": false,
  "can_like": true,
  "site_ID": 3584907,
  "post_ID": 83587,
  "likes": [...]
}

Like Post

POST /wordpress/rest/v1.1/sites/{site}/posts/{post_id}/likes/new

Unlike Post

POST /wordpress/rest/v1.1/sites/{site}/posts/{post_id}/likes/mine/delete

Post Reblogs

Check Reblog Status

GET /wordpress/rest/v1.1/sites/{site}/posts/{post_id}/reblogs/mine

Response:

{
  "can_reblog": true,
  "can_user_reblog": true,
  "is_reblogged": false
}

Post Types

List Post Types

GET /wordpress/rest/v1.1/sites/{site}/post-types

Response:

{
  "found": 3,
  "post_types": {
    "post": {
      "name": "post",
      "label": "Posts",
      "labels": {...}
    },
    "page": {
      "name": "page",
      "label": "Pages",
      "labels": {...}
    }
  }
}

Post Counts

Get Post Counts

GET /wordpress/rest/v1.1/sites/{site}/post-counts/{post_type}

Example: /sites/{site}/post-counts/post or /sites/{site}/post-counts/page

Response:

{
  "counts": {
    "all": {"count": 150},
    "publish": {"count": 120},
    "draft": {"count": 25},
    "trash": {"count": 5}
  }
}

Users

List Site Users

GET /wordpress/rest/v1.1/sites/{site}/users

Response:

{
  "found": 3,
  "users": [
    {
      "ID": 277004271,
      "login": "username",
      "name": "John Doe",
      "email": "john@example.com",
      "roles": ["administrator"]
    }
  ]
}

User Settings

Get User Settings

GET /wordpress/rest/v1.1/me/settings

Response:

{
  "enable_translator": true,
  "surprise_me": false,
  "holidaysnow": false,
  "user_login": "username"
}

Update User Settings

POST /wordpress/rest/v1.1/me/settings/
Content-Type: application/json

{
  "enable_translator": false
}

User Likes

Get User's Liked Posts

GET /wordpress/rest/v1.1/me/likes

Response:

{
  "found": 10,
  "likes": [
    {
      "ID": 83587,
      "site_ID": 3584907,
      "title": "Liked Post Title"
    }
  ]
}

Embeds

Get Site Embeds

GET /wordpress/rest/v1.1/sites/{site}/embeds

Returns available embed handlers for the site.

Shortcodes

Get Available Shortcodes

GET /wordpress/rest/v1.1/sites/{site}/shortcodes

Returns shortcodes available on the site.

Pagination

WordPress.com uses cursor-based pagination with page_handle:

import os
import requests

headers = {
    'Authorization': f'Bearer {os.environ["MATON_API_KEY"]}'
}

# Initial request
response = requests.get(
    'https://api.maton.ai/wordpress/rest/v1.1/sites/{site}/posts',
    headers=headers,
    params={'number': 20}
)
result = response.json()
all_posts = result['posts']

# Continue with page_handle
while result.get('meta', {}).get('next_page'):
    response = requests.get(
        'https://api.maton.ai/wordpress/rest/v1.1/sites/{site}/posts',
        headers=headers,
        params={'number': 20, 'page_handle': result['meta']['next_page']}
    )
    result = response.json()
    all_posts.extend(result['posts'])

print(f"Total posts: {len(all_posts)}")

Alternatively, use offset for simple pagination:

GET /wordpress/rest/v1.1/sites/{site}/posts?number=20&offset=20

Code Examples

JavaScript

const response = await fetch(
  'https://api.maton.ai/wordpress/rest/v1.1/sites/{site}/posts?number=10',
  {
    headers: {
      'Authorization': `Bearer ${process.env.MATON_API_KEY}`
    }
  }
);
const data = await response.json();
console.log(`Found ${data.found} posts`);

Python

import os
import requests

response = requests.get(
    'https://api.maton.ai/wordpress/rest/v1.1/sites/{site}/posts',
    headers={'Authorization': f'Bearer {os.environ["MATON_API_KEY"]}'},
    params={'number': 10, 'status': 'publish'}
)
data = response.json()
print(f"Found {data['found']} posts")

Python (Create Post)

import os
import requests

response = requests.post(
    'https://api.maton.ai/wordpress/rest/v1.1/sites/{site}/posts/new',
    headers={
        'Authorization': f'Bearer {os.environ["MATON_API_KEY"]}',
        'Content-Type': 'application/json'
    },
    json={
        'title': 'My New Post',
        'content': '<p>Hello World!</p>',
        'status': 'draft',
        'categories': 'news',
        'tags': 'hello, first-post'
    }
)
post = response.json()
print(f"Created post ID: {post['ID']}")

Notes

WordPress.com API uses REST v1.1 (not v2)
Site identifiers can be numeric IDs or domain names
POST requests to /posts/{id} update the post (not PUT/PATCH)
DELETE uses POST to /posts/{id}/delete (not HTTP DELETE)
Categories and tags are created automatically when referenced in posts
Date/time values are in ISO 8601 format
All content is HTML-formatted
IMPORTANT: When piping curl output to jq or other commands, environment variables like $MATON_API_KEY may not expand correctly in some shell environments

Error Handling

Status	Meaning
400	Missing WordPress connection or bad request
401	Invalid or missing Maton API key
403	Insufficient permissions or OAuth scope
404	Site or resource not found
429	Rate limited
4xx/5xx	Passthrough error from WordPress.com API

Error responses include details:

{
  "error": "unauthorized",
  "message": "User cannot view users for specified site"
}

Troubleshooting: API Key Issues

Check that the MATON_API_KEY environment variable is set:

echo $MATON_API_KEY

Verify the API key is valid by listing connections:

python <<'EOF'
import urllib.request, os, json
req = urllib.request.Request('https://api.maton.ai/connections')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
EOF

Troubleshooting: Invalid App Name

Ensure your URL path starts with wordpress. For example:

Correct: https://api.maton.ai/wordpress/rest/v1.1/sites/{site_id}/posts
Incorrect: https://api.maton.ai/rest/v1.1/sites/{site_id}/posts

WordPress

Audits

Install

WordPress.com

Quick Start

Base URL

Authentication

Getting Your API Key

Connection Management

List Connections

Create Connection

Get Connection

Delete Connection

Specifying Connection

Security & Permissions

API Reference

Sites

Get Site Information

Posts

List Posts

Get Post

Create Post

Update Post

Delete Post

Pages

List Pages

Create Page

Get Page Dropdown List

Get Page Templates

Post Likes

Get Post Likes

Like Post

Unlike Post

Post Reblogs

Check Reblog Status

Post Types

List Post Types

Post Counts

Get Post Counts

Users

List Site Users

User Settings

Get User Settings

Update User Settings

User Likes

Get User's Liked Posts

Embeds

Get Site Embeds

Shortcodes

Get Available Shortcodes

Pagination

Code Examples

JavaScript

Python

Python (Create Post)

Notes

Error Handling

Troubleshooting: API Key Issues

Troubleshooting: Invalid App Name

Resources