Ingestics – API and RSS Automation vs REST XML-RPC Data Checker

Ingestics is a WordPress automation plugin for ingesting and publishing external content from REST APIs and RSS/Atom feeds. Ingestics(TM) is a product by AutoAPIWP. Features included in this WordPress.org package: * API + RSS ingestion in one admin interface * Up to 3 API providers and 2 RSS providers * Manual fetch controls for API and RSS * API and RSS request/response preview panels * JSON path mapping (basic) * XML/CSV field mapping support * Duplicate protection and content quality checks * Activity log with fetched/created/filtered/duplicate/error/unaccounted counts * Source attribution controls * Featured image sideload support * Setup wizards and guided provider setup flow * Security-focused request handling and secret masking Optional separate commercial extension: * Additional scheduling/rotation modes * Additional provider adapters and OAuth flows * Additional frontend layouts and advanced transform/pipeline controls The commercial extension is distributed separately from this WordPress.org package. Why Ingestics One plugin handles both API and RSS pipelines Provider-level controls for mapping, auth, publish mode, and enrichment Detailed logging for operational visibility Works with user-configured providers and feed endpoints API Capabilities HTTP methods: GET, POST, PUT, PATCH, DELETE Optional HEAD/OPTIONS via compatibility toggle Auth modes: none, API key, bearer, basic Custom headers/body support Pagination support for supported provider formats Retry and basic rate-limit handling Google Sheets share/edit URLs can be normalized to CSV export endpoints RSS Capabilities Feed ingestion with provider controls RSS/Atom support Optional full-text extraction mode when configured Content & Publish Controls Publish modes: publish, draft, pending Duplicate detection by source/title safeguards Source attribution block and labels Featured image sideloading controls Front-end Output Shortcodes: [auto_api_feed], [aapi_feed] Template tags: aapi_get_feed(), aapi_render_feed() Gutenberg block: ingestics/feed External Services This plugin may connect to external services depending on your configuration: Freemius Used for licensing/account management and plugin updates when enabled by the site administrator. Service: https://freemius.com Privacy: https://freemius.com/privacy Terms: https://freemius.com/terms Pexels Used only when stock image fallback is explicitly enabled and configured by the site administrator. Service: https://www.pexels.com Privacy: https://www.pexels.com/privacy-policy Terms: https://www.pexels.com/terms-of-service LibreTranslate Used only when translation is explicitly enabled and configured by the site administrator. Endpoint is configured by the site administrator. User-configured APIs and RSS feeds By design, this plugin fetches data from REST APIs and RSS feeds configured by the site administrator. No data is sent to external endpoints unless enabled and configured by an administrator.

JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress. If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests. In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default. In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to: copy easily your published contents natively with the REST API (and not with a web crawler); get the list of all users (with their ID, nickname and name); retrieve other information that you didn’t want to be public (such as an unlisted published page or a saved media not yet used). Even if you could do the stuff by writing your own code using native filters, this plugin aims to help you to control JSON REST API and XML-RPC API accesses from the administration panel or programmatically by a simple API filter. Basic Features Disable REST API interface for unlogged users. Disable JSONP support on REST API. Add Basic Authentication to REST API. Remove REST tags, REST Link HTTP header and REST Really Simple Discovery (RSD) informations. Setup trusted users, IP/Networks and endpoints for unlogged users REST requests. Change REST endpoint prefix. Disable XML-RPC API interface. Remove to the Really Simple Discovery (RDS) informations. Remove X-Pingback HTTP header. Setup trusted users, IP/Networks and methods for XML-RPC requests. Show user’s access informations in users list administration screen. Usage Once the plugin is installed you can control settings in the following ways: Using the Settings->REST XML-RPC Data Checker administration screen. Programmatically, by using rest_xmlrpc_data_checker_settings filter (see below). API Hooks rest_xmlrpc_data_checker_settings Filters plugin settings values. apply_filters( 'rest_xmlrpc_data_checker_settings', array $settings ) rest_xmlrpc_data_checker_admin_settings Filter allowing to display or not the plugin settings page in the administration. apply_filters( 'rest_xmlrpc_data_checker_admin_settings', boolean $display ) rest_xmlrpc_data_checker_rest_error Filter JSON REST authentication error after plugin checks. apply_filters( 'rest_xmlrpc_data_checker_rest_error', WP_Error|boolean $result ) xmlrpc_before_insert_post Filter XML-RPC post data to be inserted via XML-RPC before to insert post into database. apply_filters( 'xmlrpc_before_insert_post', array|IXR_Error $content_struct, WP_User $user )