SyncDock
SyncDock is a headless MCP-style API gateway plugin that transforms your WordPress site into a fully controllable content intelligence and publishing platform — accessible by AI agents, SaaS applications, browser extensions, desktop apps, and any external client.
Why SyncDock?
WordPress’s native REST API provides basic CRUD operations, but modern AI workflows, automation pipelines, and external integrations demand much more. SyncDock bridges the gap with:
- Secure API Key Authentication — SHA-256 hashed keys with per-key scopes, rate limits, and expiration
- HMAC-SHA256 Signature Verification — Tamper-proof request signing with replay protection
- Gutenberg Block Converter — Bidirectional JSON ↔ block markup for 18+ core block types
- Content Context Layer — AI-optimized intelligence endpoints for content discovery and gap analysis
- Advanced Query Engine — Multi-filter content search with taxonomy AND/OR logic
- SEO Plugin Bridge — Auto-detects Yoast, Rank Math, and AIOSEO for transparent SEO metadata
- Response Caching — Configurable TTL with auto-invalidation on content changes
- Activity Logging — Full request audit trail with retention policies
Key Features
🔐 Multi-Layer Security
- API Key authentication with SHA-256 hashing (keys never stored in plaintext)
- Optional HMAC-SHA256 request signing with 5-minute replay window
- 10 granular permission scopes (
read_posts,write_posts,delete_posts, etc.) - Per-key and per-IP rate limiting with sliding window
- Failed authentication brute-force protection (10 failures / 15 min / IP)
📝 Full Post Lifecycle
- Create, read, update (PUT/PATCH), and delete posts
- Structured Gutenberg block input/output (JSON ↔ block markup)
- Partial block-level updates (insert/replace/delete by index)
- Post revision listing and one-click restore
- Scheduled publishing via
status: future - SEO metadata sync with popular SEO plugins
🧠 Content Intelligence
/context/posts— Recent, popular, and similar posts with content gap analysis/context/taxonomies— Hierarchical category trees and tag clouds/context/media— Library summary, MIME distribution, unattached files/context/site-info— Site configuration, image sizes, post types
🔍 Query Engine
- Multi-taxonomy filters with AND/OR logic
- Date range queries on publish or modified dates
- Full-text search with highlighted excerpts
- Site-wide content discovery endpoint
📁 Media Management
- Upload via multipart/form-data or base64 JSON
- Server-side MIME type validation
- Attach/detach media from posts
- Full image metadata and size information
⚙️ Admin Dashboard
- Real-time API metrics (requests, errors, response times)
- API key management with one-click creation and revocation
- Filterable activity log with status/method/search
- System health monitoring
- Configurable rate limits, caching, and data retention
Who Is SyncDock For?
- AI Agents — Connect Claude, GPT, or custom models to publish and manage content
- SaaS Applications — Build external content management dashboards
- Browser Extensions — Create write-from-anywhere tools
- Desktop Apps — Build native publishing applications
- Automation Pipelines — Integrate WordPress into CI/CD or content workflows
- Mobile Apps — Power native mobile content creation tools
External services
This plugin does not connect to any external third-party services. All data processing — including API key management, authentication, rate limiting, caching, and content operations — is performed entirely on your WordPress server.
Gravatar avatar URLs may appear in API responses for post authors. This is standard WordPress core behavior (get_avatar_url()) and is not initiated by SyncDock.