Skip to content
WP2WP2

Overview

WP2Tutor REST API 0.1.0

Section titled “WP2Tutor REST API 0.1.0”

AI / RAG / Embedding. Canonical namespace is {product}/{slug}/v1: wp2tutor/ai/v1, wp2tutor/embedding/v1, wp2tutor/rag/v1. GET /chat is public (permission_callback __return_true): health only, no secret and no LLM call. POST /chat takes a raw prompt body plus header X-Ai-Chat-Secret (not DualRest). Embedding and RAG DataTables require manage_options: cookie + X-WP-Nonce or Application Password (DualRest). Bot webhooks are documented in the wp2tutor-bot specification.

Information

  • OpenAPI version: 3.0.3

Operations

Section titled “Operations”
GET
/wp-json/wp2tutor/ai/v1/chat
POST
/wp-json/wp2tutor/ai/v1/chat
POST
/wp-json/wp2tutor/embedding/v1/sync
POST
/wp-json/wp2tutor/embedding/v1/statuses
POST
/wp-json/wp2tutor/embedding/v1/diagnostics
GET
/wp-json/wp2tutor/rag/v1/datatables
POST
/wp-json/wp2tutor/rag/v1/datatables
GET
/wp-json/wp2tutor/rag/v1/chunk/{id_chunk}

Authentication

Section titled “Authentication”
Section titled “cookie”

WordPress logged-in cookie session plus REST nonce header X-WP-Nonce.

Security scheme type: apiKey

Header parameter name: X-WP-Nonce

applicationPassword

Section titled “applicationPassword”

WordPress Application Password (DualRest).

Security scheme type: http

aiChatSecret

Section titled “aiChatSecret”

Shared secret from SecretKeyManager (option wp2lms_ai_chat_secret_key). Compared with hash_equals. Missing/mismatch → WP_Error rest_forbidden 401.

Security scheme type: apiKey

Header parameter name: X-Ai-Chat-Secret