Developer APIs & PWAREST8 min read•Updated October 2026
REST API & AJAX Endpoint Reference
Complete API reference for bookings, leads, invoices, e-sign contracts, and PWA push subscriptions.
All endpoints are accessible via platform REST API (/wp-json/cora/v1/ or /wp-json/cora-pwa/v1/ or /wp-json/cora-mcp/v1/) and standard AJAX actions.
1. Authentication & Nonces
- REST Requests: Require
X-WP-Nonceheader or Bearer API token. - AJAX Requests: Require
nonce: coraREWPData.ajaxNoncein POST body. - MCP & OAuth Requests: Require
Authorization: Bearer <token>issued via OAuth 2.1 PKCE.
2. API Endpoints Table
| Method | Route / Action | Required Permission | Description |
|---|---|---|---|
GET | /wp-json/cora/v1/invoices | cora_manage_financials | Fetch agency tax invoices |
POST | /wp-json/cora/v1/invoices | cora_manage_financials | Create 18% GST invoice |
GET | /wp-json/cora/v1/forms/all-submissions | cora_view_dashboard | Fetch all workspace form submissions with form metadata JOINed |
DELETE | /wp-json/cora/v1/forms/submissions/{id} | cora_manage_bookings | Securely delete single form submission record |
POST | /wp-json/cora/v1/referrals/track | Public | Record affiliate referral impressions, clicks, and checkout conversions |
POST | /wp-json/cora/v1/contracts/sign | Public (Token-Based) | Submit SHA-256 e-signature |
POST | /wp-json/cora-pwa/v1/save-subscription | Authenticated User | Store VAPID Web Push subscription |
GET | /wp-json/cora-pwa/v1/version-check | Public | Query active workspace version & changelog |
GET | /wp-json/cora-mcp/v1/openapi.json | Public | OpenAPI 3.0.1 schema (curated 28 tools ceiling; ?all=1 for full registry) |
POST | /wp-json/cora-mcp/v1/rpc | Bearer Token (OAuth 2.1) | MCP JSON-RPC 2.0 tool execution gateway |
GET | /wp-json/cora-mcp/v1/tools | Bearer Token (OAuth 2.1) | Canonical tool registry and capabilities |
GET | /.well-known/oauth-authorization-server | Public | RFC 8414 & RFC 9728 OAuth 2.1 server metadata |
GET | /api/health | Public | Production edge deployment and AI agent health probe |
POST | /api/ai-preview | Public | Sticky AI SDR query handler with objection vector analysis & coupon dispatch |
POST | /api/partner-application | Public | Partner & creator coaching accelerator enrollment intake |
Have questions about this module?
Our founding engineering team answers developer inquiries directly.