WordPress REST API Development Skill

Overview

Systematic REST API review for WordPress plugins, themes, and custom code. Core principle: Every route needs a clear contract, explicit authorization, validated input, and predictable output. Review covers route registration, controller patterns, request parsing, schema and argument validation, response formatting, caching implications, and compatibility concerns. Report findings with line numbers, severity labels, and BAD/GOOD code pairs where helpful.

When to Use

Use when:

• Reviewing register_rest_route() usage
• Auditing custom API endpoints or controller classes
• Checking permission_callback logic
• Validating WP_REST_Request input handling
• Reviewing response shape, status codes, and schema
• Designing versioned endpoints for headless or block-driven apps