Title: Sticklight Author: Elementor Published: Jawza 26, 2026 Last modified: Miyzan 7, 2026 --- Search plugins ![](https://ps.w.org/sticklight/assets/icon.svg?rev=3549373) # Sticklight By [Elementor](https://profiles.wordpress.org/elemntor/) [Download](https://downloads.wordpress.org/plugin/sticklight.1.1.0.zip) * [Details](https://kaa.wordpress.org/plugins/sticklight/#description) * [Reviews](https://kaa.wordpress.org/plugins/sticklight/#reviews) * [Installation](https://kaa.wordpress.org/plugins/sticklight/#installation) * [Development](https://kaa.wordpress.org/plugins/sticklight/#developers) [Support](https://wordpress.org/support/plugin/sticklight/) ## Description Sticklight Connector securely connects your WordPress site to [Sticklight](https://sticklight.com), an AI app-building platform for creating web applications, dashboards, internal tools, and custom interfaces powered by your existing WordPress data. The plugin extends the WordPress REST API with additional endpoints that allow authenticated Sticklight projects and external applications to retrieve user context and interact with permitted WordPress data. This allows the Sticklight agent to work with content and functionality exposed through WordPress while continuing to respect WordPress authentication, user roles, and capability checks. Sticklight does not replace WordPress authentication or bypass WordPress permissions. It relies on WordPress authentication APIs for credential validation, uses WordPress Application Passwords for API access, and applies standard capability checks (`current_user_can`) to protected requests. With WordPress connected to Sticklight, you can use natural-language instructions to build applications and tools around the data already stored in your site — without replacing WordPress as your CMS or backend. For [WooCommerce sites](https://sticklight.com/woocommerce), the Sticklight Connector can also provide authenticated access to WooCommerce data and functionality exposed through the WordPress REST API. This allows Sticklight projects to build custom dashboards, internal tools, storefront experiences, and workflows around products, orders, customers, inventory, and other WooCommerce resources, subject to the permissions and capabilities of the connected WordPress user. For example, Sticklight can be used to create tailored order-management interfaces, product and inventory tools, customer-facing experiences, or operational dashboards that work with the data already managed in WooCommerce. #### Typical use cases * Build AI-generated applications, dashboards, and internal tools powered by WordPress data * Create custom interfaces for managing WordPress content outside wp-admin * Build headless or hybrid WordPress frontends * Create editorial, content-management, or operational workflows around existing WordPress data * Build tools using data exposed by compatible WordPress plugins, including WooCommerce * Connect React applications to the WordPress user and permission system * Give authenticated applications controlled access to WordPress REST API resources #### Features * Securely connects WordPress with Sticklight projects * Enables the Sticklight agent to work with authorized WordPress data through the REST API * Authenticates through WordPress and issues Application Passwords for subsequent API access * Adds REST endpoints for login, logout, and retrieving current user context * Preserves WordPress roles and capability checks * Supports cross-origin and headless WordPress architectures * Works with resources exposed through the WordPress REST API * Extensible through WordPress hooks and filters #### About Sticklight Sticklight is an AI app-building platform that lets users create production-ready applications and tools through natural-language instructions. The WordPress Connector allows those applications to work with live WordPress content and data while retaining WordPress as the underlying content, user, and permissions system. Learn more about [Sticklight for WordPress](https://sticklight.com/wordpress). Read the [WordPress Connector](https://sticklight.com/help/connectors/wordpress-connector) documentation. ### Usage #### Login Authenticate with username (or email) and password: ``` POST /wp-json/sticklight/v1/auth/login ``` On success the response includes an Application Password for subsequent API requests and the authenticated user: ``` { "app_password": "XXXX XXXX XXXX XXXX XXXX XXXX", "user": { "user_id": 1, "username": "admin", "display_name": "Admin", "email": "admin@example.com", "roles": ["administrator"] } } ``` Use the returned `app_password` with HTTP Basic Authentication for all further requests. #### Current user Retrieve the current authenticated user: ``` GET /wp-json/sticklight/v1/auth/me ``` #### Logout Revoke the current Application Password session: ``` POST /wp-json/sticklight/v1/auth/logout ``` #### User registration User creation is handled through the built-in WordPress REST API (`POST /wp-json/ wp/v2/users`) and requires administrator authentication. #### Accessing protected data Requests to any endpoint must pass standard WordPress permission checks. Sticklight does not bypass or override these checks. ### Security Sticklight follows WordPress security practices: * Delegates credential validation to WordPress authentication APIs and uses WordPress Application Passwords for subsequent API access * Issues Application Passwords scoped to individual sessions * Does not provide user registration — accounts must be created by an administrator * Applies capability checks (`current_user_can`) on all endpoints * Does not expose private data without proper permissions For external applications, it is recommended to: * Use HTTPS * Restrict allowed origins * Avoid exposing sensitive endpoints unnecessarily ## Installation 1. Upload the plugin files to the `/wp-content/plugins/sticklight-connector` directory, or install the plugin through the WordPress plugins screen. 2. Activate the plugin through the **Plugins** screen in WordPress. 3. Ensure permalinks are enabled (**Settings** > **Permalinks**). No additional configuration is required for basic usage. ## FAQ ### Does this plugin replace WordPress authentication? No. It delegates credential validation to `wp_authenticate` and uses WordPress Application Passwords for API access. ### Does it allow bypassing permissions? No. All requests are validated using standard WordPress capability checks. ### Can it be used in headless setups? Yes. It is designed for headless and cross-origin WordPress architectures. ### Does it handle user registration? No. User creation should be done through the built-in WordPress REST API (`POST / wp-json/wp/v2/users`) with administrator authentication. ### Can I extend the endpoints? Yes. Developers can add or modify behavior using WordPress hooks and filters. ### Does the plugin itself use AI? No. The plugin acts as the secure connection between WordPress and Sticklight. AI functionality is provided by the Sticklight platform, while the connector handles authenticated access to permitted WordPress data and functionality. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Sticklight” is open source software. The following people have contributed to this plugin. Contributors * [ Elementor ](https://profiles.wordpress.org/elemntor/) “Sticklight” has been translated into 1 locale. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/sticklight/contributors) for their contributions. [Translate “Sticklight” into your language.](https://translate.wordpress.org/projects/wp-plugins/sticklight) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/sticklight/), check out the [SVN repository](https://plugins.svn.wordpress.org/sticklight/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/sticklight/) by [RSS](https://plugins.trac.wordpress.org/log/sticklight/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.1.0 * New: Add custom domains to WP REST API cors #### 1.0.0 * Initial release. ## Meta * Version **1.1.0** * Last updated **4 kúnler ago** * Active installations **200+** * WordPress version ** 6.8 or higher ** * Tested up to **7.0.4** * PHP version ** 7.4 or higher ** * Languages * [Dutch](https://nl.wordpress.org/plugins/sticklight/) and [English (US)](https://wordpress.org/plugins/sticklight/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/sticklight) * Tags * [api](https://kaa.wordpress.org/plugins/tags/api/)[authentication](https://kaa.wordpress.org/plugins/tags/authentication/) [headless](https://kaa.wordpress.org/plugins/tags/headless/)[react](https://kaa.wordpress.org/plugins/tags/react/) [rest-api](https://kaa.wordpress.org/plugins/tags/rest-api/) * [Advanced View](https://kaa.wordpress.org/plugins/sticklight/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/sticklight/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/sticklight/reviews/) ## Contributors * [ Elementor ](https://profiles.wordpress.org/elemntor/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/sticklight/)