NovaCraft API Builder for WordPress turns your WooCommerce store into a fully-featured headless commerce backend. It exposes a clean, versioned REST API under /wp-json/novacraft/v1/ with:
- JWT Authentication — Issue access tokens (15 min TTL) and refresh tokens (30 days), with automatic rotation and revocation.
- API Key Management — Create
nc_live_*andnc_test_*keys with granular permissions, IP allowlists, rate-limit overrides, and expiry dates. - Product Endpoints — List, filter, sort, paginate, and retrieve products, variations, and reviews.
- Category Endpoints — Browse the WooCommerce category tree.
- Order Endpoints — Authenticated customers can view their order history and add order notes.
- Customer Endpoints — Manage profile, addresses, and order history.
- Cart Endpoints — Full headless cart: add/update/remove items, apply coupons, calculate shipping, and check out.
- Caching — Object-cache and transient fallback, ETag headers, tag-based invalidation.
- Rate Limiting — Sliding-window limiter with Redis or transient fallback. Account lockout after 5 failed logins.
- React Admin UI — Dashboard, API Key manager, API Explorer, request logs, and settings page.
- Extensibility — 6 filters and 6 actions so Pro / Enterprise add-ons can hook in without touching Core.
Pro Features (Coming Soon)
- RS256 keypair authentication
- Webhooks
- AI product recommendations
- Multi-currency support
- Subscription endpoints
- Cloud log aggregation
Requirements
- WordPress 6.4 or higher
- WooCommerce 8.0 or higher
- PHP 8.1 or higher
Source Code
This plugin is fully open source. The human-readable source files for all compiled JavaScript/CSS assets are publicly available on GitHub:
https://github.com/wpcrafthub/novacraft-api-builder
The admin dashboard is built with React (TypeScript) using Vite as the build tool. Source files are located in admin/src/. To regenerate the compiled assets in admin/dist/, run:
npm installnpm run build
