{"id":310162,"date":"2026-05-26T15:34:11","date_gmt":"2026-05-26T15:34:11","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/sticklight\/"},"modified":"2026-09-07T19:37:58","modified_gmt":"2026-09-07T19:37:58","slug":"sticklight","status":"publish","type":"plugin","link":"https:\/\/kaa.wordpress.org\/plugins\/sticklight\/","author":16140772,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.1.0","stable_tag":"1.1.0","tested":"7.0.4","requires":"6.8","requires_php":"7.4","requires_plugins":null,"header_name":"Sticklight","header_author":"Elementor","header_description":"Sticklight Connector for WordPress.","assets_banners_color":"","last_updated":"2026-09-07 19:37:58","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/sticklight.com\/","header_author_uri":"https:\/\/elementor.com\/","rating":0,"author_block_rating":0,"active_installs":200,"downloads":1125,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"KingYes","date":"2026-05-26 15:30:19","revision":3549369},"1.1.0":{"tag":"1.1.0","author":"KingYes","date":"2026-09-07 19:37:58","revision":3685478}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon.svg":{"filename":"icon.svg","revision":3549373,"resolution":false,"location":"assets","locale":false}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.1.0"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[1556,710,141196,52651,23853],"plugin_category":[38],"plugin_contributors":[156792],"plugin_business_model":[],"class_list":["post-310162","plugin","type-plugin","status-publish","hentry","plugin_tags-api","plugin_tags-authentication","plugin_tags-headless","plugin_tags-react","plugin_tags-rest-api","plugin_category-authentication","plugin_contributors-elemntor","plugin_committers-arielk-1","plugin_committers-elemntor","plugin_committers-kingyes"],"banners":[],"icons":{"svg":"https:\/\/ps.w.org\/sticklight\/assets\/icon.svg?rev=3549373","icon":"https:\/\/ps.w.org\/sticklight\/assets\/icon.svg?rev=3549373","icon_2x":false,"generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Sticklight Connector securely connects your WordPress site to <a href=\"https:\/\/sticklight.com\">Sticklight<\/a>, an AI app-building platform for creating web applications, dashboards, internal tools, and custom interfaces powered by your existing WordPress data.<\/p>\n\n<p>The plugin extends the WordPress REST API with additional endpoints that allow authenticated Sticklight projects and external applications to retrieve user context and interact with permitted WordPress data. This allows the Sticklight agent to work with content and functionality exposed through WordPress while continuing to respect WordPress authentication, user roles, and capability checks.<\/p>\n\n<p>Sticklight does not replace WordPress authentication or bypass WordPress permissions. It relies on WordPress authentication APIs for credential validation, uses WordPress Application Passwords for API access, and applies standard capability checks (<code>current_user_can<\/code>) to protected requests.<\/p>\n\n<p>With WordPress connected to Sticklight, you can use natural-language instructions to build applications and tools around the data already stored in your site \u2014 without replacing WordPress as your CMS or backend.<\/p>\n\n<p>For <a href=\"https:\/\/sticklight.com\/woocommerce\">WooCommerce sites<\/a>, the Sticklight Connector can also provide authenticated access to WooCommerce data and functionality exposed through the WordPress REST API. This allows Sticklight projects to build custom dashboards, internal tools, storefront experiences, and workflows around products, orders, customers, inventory, and other WooCommerce resources, subject to the permissions and capabilities of the connected WordPress user.<\/p>\n\n<p>For example, Sticklight can be used to create tailored order-management interfaces, product and inventory tools, customer-facing experiences, or operational dashboards that work with the data already managed in WooCommerce.<\/p>\n\n<h4>Typical use cases<\/h4>\n\n<ul>\n<li>Build AI-generated applications, dashboards, and internal tools powered by WordPress data<\/li>\n<li>Create custom interfaces for managing WordPress content outside wp-admin<\/li>\n<li>Build headless or hybrid WordPress frontends<\/li>\n<li>Create editorial, content-management, or operational workflows around existing WordPress data<\/li>\n<li>Build tools using data exposed by compatible WordPress plugins, including WooCommerce<\/li>\n<li>Connect React applications to the WordPress user and permission system<\/li>\n<li>Give authenticated applications controlled access to WordPress REST API resources<\/li>\n<\/ul>\n\n<h4>Features<\/h4>\n\n<ul>\n<li>Securely connects WordPress with Sticklight projects<\/li>\n<li>Enables the Sticklight agent to work with authorized WordPress data through the REST API<\/li>\n<li>Authenticates through WordPress and issues Application Passwords for subsequent API access<\/li>\n<li>Adds REST endpoints for login, logout, and retrieving current user context<\/li>\n<li>Preserves WordPress roles and capability checks<\/li>\n<li>Supports cross-origin and headless WordPress architectures<\/li>\n<li>Works with resources exposed through the WordPress REST API<\/li>\n<li>Extensible through WordPress hooks and filters<\/li>\n<\/ul>\n\n<h4>About Sticklight<\/h4>\n\n<p>Sticklight is an AI app-building platform that lets users create production-ready applications and tools through natural-language instructions. The WordPress Connector allows those applications to work with live WordPress content and data while retaining WordPress as the underlying content, user, and permissions system.<\/p>\n\n<p>Learn more about <a href=\"https:\/\/sticklight.com\/wordpress\">Sticklight for WordPress<\/a>.<\/p>\n\n<p>Read the <a href=\"https:\/\/sticklight.com\/help\/connectors\/wordpress-connector\">WordPress Connector<\/a> documentation.<\/p>\n\n<h3>Usage<\/h3>\n\n<h4>Login<\/h4>\n\n<p>Authenticate with username (or email) and password:<\/p>\n\n<pre><code>POST \/wp-json\/sticklight\/v1\/auth\/login\n<\/code><\/pre>\n\n<p>On success the response includes an Application Password for subsequent API requests and the authenticated user:<\/p>\n\n<pre><code>{\n  \"app_password\": \"XXXX XXXX XXXX XXXX XXXX XXXX\",\n  \"user\": {\n    \"user_id\": 1,\n    \"username\": \"admin\",\n    \"display_name\": \"Admin\",\n    \"email\": \"admin@example.com\",\n    \"roles\": [\"administrator\"]\n  }\n}\n<\/code><\/pre>\n\n<p>Use the returned <code>app_password<\/code> with HTTP Basic Authentication for all further requests.<\/p>\n\n<h4>Current user<\/h4>\n\n<p>Retrieve the current authenticated user:<\/p>\n\n<pre><code>GET \/wp-json\/sticklight\/v1\/auth\/me\n<\/code><\/pre>\n\n<h4>Logout<\/h4>\n\n<p>Revoke the current Application Password session:<\/p>\n\n<pre><code>POST \/wp-json\/sticklight\/v1\/auth\/logout\n<\/code><\/pre>\n\n<h4>User registration<\/h4>\n\n<p>User creation is handled through the built-in WordPress REST API (<code>POST \/wp-json\/wp\/v2\/users<\/code>) and requires administrator authentication.<\/p>\n\n<h4>Accessing protected data<\/h4>\n\n<p>Requests to any endpoint must pass standard WordPress permission checks. Sticklight does not bypass or override these checks.<\/p>\n\n<h3>Security<\/h3>\n\n<p>Sticklight follows WordPress security practices:<\/p>\n\n<ul>\n<li>Delegates credential validation to WordPress authentication APIs and uses WordPress Application Passwords for subsequent API access<\/li>\n<li>Issues Application Passwords scoped to individual sessions<\/li>\n<li>Does not provide user registration \u2014 accounts must be created by an administrator<\/li>\n<li>Applies capability checks (<code>current_user_can<\/code>) on all endpoints<\/li>\n<li>Does not expose private data without proper permissions<\/li>\n<\/ul>\n\n<p>For external applications, it is recommended to:<\/p>\n\n<ul>\n<li>Use HTTPS<\/li>\n<li>Restrict allowed origins<\/li>\n<li>Avoid exposing sensitive endpoints unnecessarily<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin files to the <code>\/wp-content\/plugins\/sticklight-connector<\/code> directory, or install the plugin through the WordPress plugins screen.<\/li>\n<li>Activate the plugin through the <strong>Plugins<\/strong> screen in WordPress.<\/li>\n<li>Ensure permalinks are enabled (<strong>Settings<\/strong> &gt; <strong>Permalinks<\/strong>).<\/li>\n<\/ol>\n\n<p>No additional configuration is required for basic usage.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20this%20plugin%20replace%20wordpress%20authentication%3F\"><h3>Does this plugin replace WordPress authentication?<\/h3><\/dt>\n<dd><p>No. It delegates credential validation to <code>wp_authenticate<\/code> and uses WordPress Application Passwords for API access.<\/p><\/dd>\n<dt id=\"does%20it%20allow%20bypassing%20permissions%3F\"><h3>Does it allow bypassing permissions?<\/h3><\/dt>\n<dd><p>No. All requests are validated using standard WordPress capability checks.<\/p><\/dd>\n<dt id=\"can%20it%20be%20used%20in%20headless%20setups%3F\"><h3>Can it be used in headless setups?<\/h3><\/dt>\n<dd><p>Yes. It is designed for headless and cross-origin WordPress architectures.<\/p><\/dd>\n<dt id=\"does%20it%20handle%20user%20registration%3F\"><h3>Does it handle user registration?<\/h3><\/dt>\n<dd><p>No. User creation should be done through the built-in WordPress REST API (<code>POST \/wp-json\/wp\/v2\/users<\/code>) with administrator authentication.<\/p><\/dd>\n<dt id=\"can%20i%20extend%20the%20endpoints%3F\"><h3>Can I extend the endpoints?<\/h3><\/dt>\n<dd><p>Yes. Developers can add or modify behavior using WordPress hooks and filters.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20itself%20use%20ai%3F\"><h3>Does the plugin itself use AI?<\/h3><\/dt>\n<dd><p>No. The plugin acts as the secure connection between WordPress and Sticklight. AI functionality is provided by the Sticklight platform, while the connector handles authenticated access to permitted WordPress data and functionality.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.1.0<\/h4>\n\n<ul>\n<li>New: Add custom domains to WP REST API cors<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"Use WordPress authentication and permissions in external React applications via secure REST API endpoints.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/310162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=310162"}],"author":[{"embeddable":true,"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/elemntor"}],"wp:attachment":[{"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=310162"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=310162"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=310162"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=310162"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=310162"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/kaa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=310162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}