Developer Hub

WPPlugin Watch is open source. The plugin client lives on GitHub, the REST API is public at api.wpplugin.watch, and everything is versioned.

Public API Endpoints

Endpoint Auth Description
POST /client-scan Bearer fingerprint Submit plugin, theme, and WordPress core inventory — receive severity-rated vulnerability results
POST /version-check None Check whether the installed plugin version is current (called daily by WP-Cron)
POST /lifecycle Bearer fingerprint Notify backend of plugin deactivation or deletion events