Wyndham Hotel Development WordPress REST API
development.wyndhamhotels.com — the franchise-development site — runs the same WordPress/WP Engine stack and likewise leaves the WordPress REST API anonymously readable at /wp-json/, advertising 403 routes across 17 namespaces including the WPML translation namespaces (wpml/v1, wpml/st/v1, wpml/tm/v1, wpml/ate/v1). Anonymous HTTP 200 verified on posts, pages, media, users and types. A second WordPress MCP adapter route is registered here in the `mcp` namespace with no OAuth binding; JSON-RPC calls and the wp-abilities registry both return 401, and /.well-known/oauth-authorization-server returns 404. Incidental CMS infrastructure with franchise-marketing content only — no franchise, property or development data model is exposed.