WordPress Management

Manage plugins, themes, users, and core WordPress settings on your site
directly through the API — the same operations you'd run with wp-cli over
SSH, without needing SSH access.

How it works

Every WordPress operation is asynchronous:

You call an endpoint — e.g. activate a plugin.

The API responds immediately with 202 Accepted and a command id.

You poll GET /environments/{id}/wordpress/commands/{commandId} until
status is COMPLETED or FAILED, then read the result.

What you can do

Area	Operations
Core	Check version, check for updates, update WordPress, update the database
Plugins	List, install (from wp.org or a URL), update, activate, deactivate, delete
Themes	List, install, update, activate, delete
Users	List, view, create, update, delete, manage roles, reset a password

Every operation is validated against a fixed, safe set of commands and
arguments — there's no way to run arbitrary shell commands through this API.

Sensitive actions require confirmation

Actions with a big impact — updating WordPress core, deleting a user,
granting the administrator role, resetting a password — require you to pass
"confirm": true in the request body.

If you leave it out, the request is rejected with a clear error instead of
running. This gives you a chance to double-check before something
irreversible happens:

Protecting sensitive data

Listing or viewing users never returns password data.

Variables that look sensitive (containing words like pass, secret,
token, or key) can't be read or written through this API.

Auditing

Every command — successful, failed, or rejected before dispatch — is
recorded. GET /environments/{id}/wordpress/commands lists the full history
for a site, newest first, so you always have a record of what ran, when, and
by whom.

Full reference

See the WordPress section of the API reference for the complete list of
endpoints, parameters, and response formats.

WordPress

WordPress Management#

How it works#

What you can do#

Sensitive actions require confirmation#

Protecting sensitive data#

Auditing#