wp-http-api-client
Installation
SKILL.md
WordPress HTTP API Client
Use the WordPress HTTP API instead of cURL or URL-enabled filesystem calls.
Core selects a transport, verifies TLS by default, follows WordPress proxy and
debug hooks, and returns a consistent array|WP_Error contract.
Pick the request function
| Situation | Function |
|---|---|
| Fixed, plugin-owned URL | wp_remote_get/post/request() after an exact host configuration check |
| User/admin-influenced URL | wp_safe_remote_get/post/request() |
| Large file download | download_url() or stream => true with cleanup |
| Inbound webhook | A REST route with signature/replay verification, not an HTTP client call |
The wp_safe_remote_* variants set reject_unsafe_urls and validate the
initial destination plus redirects with wp_http_validate_url(). Prefer them
whenever any part of the URL is configurable.