REST API

Overview

ComplyFlow exposes a robust REST API for integration, automation, and advanced workflows. All endpoints are namespaced under /wp-json/complyflow/v1/.

Authentication & Authorization

1. Uses WordPress cookie + nonce for admin users.
2. Supports application passwords or OAuth for headless and third-party integrations.
3. All sensitive endpoints require proper capabilities (e.g., manage_options).

Key Endpoints


4. /scan (POST): Trigger accessibility scans.
5. /scan (GET): List scan results.
6. /consent/logs (GET): Retrieve consent logs.
7. /dsr/request (POST): Submit DSR requests.
8. /dsr/request (GET): List DSR requests.

Rate Limiting & Security


9. Nonce validation and permission callbacks on all endpoints.
10. CORS headers and security best practices enforced.
11. Rate limiting can be implemented via custom plugins or API gateways.

Third-Party Integrations


12. Use API endpoints to connect with external compliance, analytics, or automation tools.
13. See API Reference for full endpoint list and parameters.