API Authentication #
The API supports three authentication methods.
1. Cookie Authentication #
No additional headers required. Used for WordPress admin area requests.
2. Application Passwords #
Use HTTP Basic Authentication with WordPress application passwords:
curl -u "username:password" https://example.com/wp-json/dmsilm/v1/licenses
3. API Keys (Custom) #
Include API key in header:
X-API-Key: dmsi_your_key_here
Or as query parameter:
?api_key=dmsi_your_key_here
Public Endpoints #
These endpoints do NOT require authentication:
| Endpoint | Method | Purpose |
|---|---|---|
| /licenses/validate | POST | Validate license key |
| /licenses/{id}/activate | POST | Activate on site (ID-based) |
| /licenses/activate | POST | Activate on site (key-based, v1.2.0) |
| /licenses/deactivate | POST | Deactivate site (key-based, v1.2.0) |
| /activations/{id}/deactivate | DELETE | Deactivate site (ID-based) |
| /activations/check-in | POST | Check-in from site |
| /health | GET | API health check |
Related Topics #
- [API Overview](#)
- [Rate Limiting](#)
- [API Keys](#)