Developer Hub
WPPlugin Watch is open source. The plugin client lives on GitHub, the REST API is public at api.wpplugin.watch, and everything is versioned.
Public API Endpoints
| Endpoint | Auth | Description |
|---|---|---|
POST /client-scan |
Bearer fingerprint | Submit plugin, theme, and WordPress core inventory — receive severity-rated vulnerability results |
POST /version-check |
None | Check whether the installed plugin version is current (called daily by WP-Cron) |
POST /lifecycle |
Bearer fingerprint | Notify backend of plugin deactivation or deletion events |