​
CoCart for Developers

We have over 200+ filters and action hooks in the core of CoCart alone. Find them logged under the “Developers” section on the side. Each filter and action hook is linked for further reference.

​
Cart Enhanced

This free add-on is not supported by the CoCart API reference.
Enhances the cart response returned with additional product details and more. Download here

​
JWT Authentication

Authenticate via a simple JWT Token.
This JWT authentication is designed for customer users and requires basic authentication used first.
Download here

​
Beta Tester

Run bleeding edge versions of CoCart from the GitHub repository. This will replace your installed version of CoCart with the latest tagged pre-release on GitHub – use with caution, and not on production sites. You have been warned. Download here

​
WordPress REST-API

If you are looking for any of WordPress core REST API routes, go to https://developer.wordpress.org/rest-api/ for their API reference.

​
Other Plugins

The plugins below may be useful to you to extend the capability of going headless with WordPress.

​
WP-REST-API V2 Menus

This plugin extends the WordPress REST API with new routes for WordPress registered menus. Download here

​
REST API Toolbox

Allows tweaking of several REST API settings. Download here

​
REST API Log

Log all REST API requests and responses. Great for debugging. Download here

​
Query Monitor

A developer tools panel for WordPress. It enables debugging of database queries, PHP errors, hooks and actions, block editor blocks, enqueued scripts and stylesheets, HTTP API calls, and more. Download here

​
Disable REST API

Why recommend this? Because you may not want all REST API’s registered on your WordPress site exposed or simply don’t use them.
The most comprehensive plugin for controlling access to the WordPress REST API. Useful to disable routes you are not using. Download here
We developed our own security plugin designed specifically for the REST API to provide a firewall from bad requests and protection for data exposed without authentication such as the index listing the routes available.List of Features
  • Hides all sensitive details from the wp-json index.
  • Deny access to any API route if the user-agent is not trust worthy or a bot.
  • Block use of any API route in an iFrame.
  • Rate limiting for any route.
  • Anonymous user data returned if accessed without authentication.
  • CORs support.
  • Permissions callback override for any route and method.
Get your API secure