Automattic

Automattic is the company behind WordPress.com, Jetpack, WooCommerce, Tumblr, Gravatar, Akismet, WordPress VIP, Pocket Casts, Day One, Beeper and Simplenote. Its developer platform centres on the WordPress.com REST API at public-api.wordpress.com, which serves three parallel namespaces — the WordPress.com-native /rest/v1.x family, the WordPress-core-compatible /wp/v2 family, and the WordPress.com and Jetpack platform extensions in /wpcom/v2 — all behind a single OAuth 2.1 and OpenID Connect authorization server with PKCE, dynamic client registration and resource indicators. Every /rest/ version publishes a machine-readable help document and every /wp/ and /wpcom/ namespace publishes a route index, so the whole surface is self-describing even though Automattic does not ship OpenAPI for it. Automattic also runs a hosted Model Context Protocol server for WordPress.com, publishes OpenAPI for Akismet and for the Jetpack ai-plugin surface, and exposes a GraphQL Platform API for the enterprise WordPress VIP product.

Automattic publishes 7 APIs on the APIs.io network, including WordPress.com REST API v1.1, WordPress.com REST API v1.2, WordPress.com REST API v1.3, and 4 more. Tagged areas include Company, Content Management, Publishing, Blogging, and Website Hosting.

The Automattic catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Automattic’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 37 more developer resources.

🌐 Visit website 📡 Source on GitHub

56.7/100 strong Agent 57/100 agent ready Full breakdown ↓
scored 2026-08-03 · rubric v0.9

9 APIs 1 MCP Servers

CompanyContent ManagementPublishingBloggingWebsite HostingWeb PublishingContentCommentsSpam FilteringMediaAnalyticsDomainsE-CommerceOpen SourceDeveloper ToolsModel Context Protocol

Kin Score

Kin Score How this is scored →
scored 2026-08-03 · rubric v0.9

Composite quality — 56.7/100 · strong

Contract Quality 9.3 / 25

Developer Ergonomics 16.4 / 20

Commercial Clarity 12.1 / 20

Operational Transparency 7.2 / 13

Governance 2.5 / 12

Discoverability 9.3 / 10

Agent readiness — 57/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 6 / 6

Agent Skills 5 / 5

Well-Known Catalog 4 / 4

Consent & Bot Identity 3 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/automattic: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 9

Individual APIs this provider publishes, each with its own machine-readable definition.

WordPress.com REST API v1.1

The primary WordPress.com REST API. 253 endpoints covering sites, posts, pages, comments, media, taxonomy, menus, themes, stats, Reader subscriptions, notifications, sharing and...

WordPress.com REST API v1.2

Additive alternate version of the WordPress.com REST API. Publishes only the 38 endpoints whose contract differs from v1.1; clients mix versions per endpoint rather than migrati...

WordPress.com REST API v1.3

Additive alternate version of the WordPress.com REST API, publishing 19 endpoints including WordPress.com marketplace search.

WordPress.com REST API - wp/v2 namespace

The WordPress core REST API shape as served by WordPress.com, site-scoped at /wp/v2/sites/{site}/. 348 operations across posts, pages, comments, media, taxonomies, block types, ...

WordPress.com REST API - wpcom/v2 namespace

The WordPress.com and Jetpack platform extension namespace — 1,716 operations covering hosting and code deployments, domains and DNS, plans and checkout, marketplace, agency too...

WordPress.com MCP Server

Automattic's hosted Model Context Protocol server for WordPress.com. Streamable HTTP transport secured with OAuth 2.1 (PKCE S256, dynamic client registration, token rotation, no...

Akismet API

Akismet is Automattic's spam-classification service. Six operations — key verification, comment check, submit spam, submit ham, key sites and usage limit — authenticated with an...

Jetpack AI-Plugin API

A small OpenAPI-described surface for listing and creating blog posts across a user's Jetpack and WordPress.com sites, published alongside the OpenAI plugin manifest at /.well-k...

WordPress VIP Platform API

The GraphQL API for WordPress VIP, Automattic's enterprise WordPress and Node.js platform. Documented operation categories cover apps, domains, organizations, users, integration...

Scroll for all 9

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

automattic-mcp.yml

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Automattic Wordpress Com Webhooks

ASYNCAPI

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Automattic Authentication

oauth2/openIdConnect/http/apiKey · 6 schemes

SECURITY

Automattic Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Automattic Vulnerability Disclosure

Hackerone · security.txt · contact published

SECURITY

Automattic Trust Center

FedRAMP Moderate, SOC 2 Type I, ISO 27001, SOC 1, GovRAMP, TX-RAMP

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Automattic Scopes

21 scopes · authorizationCode/refreshToken/clientCredentials

21 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Automattic Agentic Access

2384 operations · 1218 acting · 20 human-in-the-loop

2384 operations · 1218 acting

AGENTIC

Resources

Get Started 6

Portal, sign-up, and the first successful call

DeveloperPortal

DeveloperPortal

GettingStarted

GettingStarted

SignUp

SignUp

Login

Sandbox

Sandbox

Console

Console

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

WellKnown

AgentSkill

AgenticAccess

LLMsTxt

MCPServer

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Conformance

Conventions

ErrorCatalog

Lifecycle

DataModel

Components

Webhooks

Scroll for all 7

Build 5

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

Packages

SDKs

CLI

ToolCrosswalk

Access & Security 8

Authentication, authorization, and security posture

Security

TrustCenter

Compliance

Authentication

OAuthScopes

SecurityTxt

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Scroll for all 8

Operate 4

Status, limits, changes, and where to get help

Support

StatusPage

ChangeLog

ReleaseNotes

Commercial 3

Pricing, plans, and the legal terms of use

Pricing

Pricing

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 2

The organization behind the API

Website

Website

Blog

Blog

Other 2

Properties that don't map to a standard resource type

OpenIDConnect

OpenIDConnect

SecondaryMarketListing

SecondaryMarketListing

Source (apis.yml)

aid: automattic
name: Automattic
description: Automattic is the company behind WordPress.com, Jetpack, WooCommerce, Tumblr, Gravatar, Akismet, WordPress VIP,
  Pocket Casts, Day One, Beeper and Simplenote. Its developer platform centres on the WordPress.com REST API at public-api.wordpress.com,
  which serves three parallel namespaces — the WordPress.com-native /rest/v1.x family, the WordPress-core-compatible /wp/v2
  family, and the WordPress.com and Jetpack platform extensions in /wpcom/v2 — all behind a single OAuth 2.1 and OpenID Connect
  authorization server with PKCE, dynamic client registration and resource indicators. Every /rest/ version publishes a machine-readable
  help document and every /wp/ and /wpcom/ namespace publishes a route index, so the whole surface is self-describing even
  though Automattic does not ship OpenAPI for it. Automattic also runs a hosted Model Context Protocol server for WordPress.com,
  publishes OpenAPI for Akismet and for the Jetpack ai-plugin surface, and exposes a GraphQL Platform API for the enterprise
  WordPress VIP product.
image: https://automattic.com/wp-content/uploads/2024/11/cropped-automattic-logo-square.png
url: https://raw.githubusercontent.com/api-evangelist/automattic/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-07-31'
modified: '2026-07-31'
tags:
- Company
- Content Management
- Publishing
- Blogging
- Website Hosting
- Web Publishing
- Content
- Comments
- Spam Filtering
- Media
- Analytics
- Domains
- E-Commerce
- Open Source
- Developer Tools
- Model Context Protocol
apis:
- name: WordPress.com REST API v1.1
  description: 'The primary WordPress.com REST API. 253 endpoints covering sites, posts, pages, comments, media, taxonomy,
    menus, themes, stats, Reader subscriptions, notifications, sharing and account management. Self-describing: every endpoint''s
    method, path, parameters and response fields are published at /rest/v1.1/help.'
  humanURL: https://developer.wordpress.com/docs/api/
  baseURL: https://public-api.wordpress.com/rest/v1.1
  image: https://automattic.com/wp-content/uploads/2024/11/cropped-automattic-logo-square.png
  tags:
  - Content Management
  - Publishing
  - Comments
  - Media
  - Analytics
  properties:
  - type: OpenAPI
    url: openapi/automattic-wordpress-com-rest-v1-1-openapi.yml
  - type: Overlay
    url: overlays/automattic-wordpress-com-rest-v1-1-overlay.yaml
  - type: Documentation
    url: https://developer.wordpress.com/docs/api/
  - type: APIReference
    url: https://developer.wordpress.com/docs/api/rest-api-reference/
  - type: GettingStarted
    url: https://developer.wordpress.com/docs/api/getting-started/
  - type: Console
    url: https://developer.wordpress.com/docs/api/console/
- name: WordPress.com REST API v1.2
  description: Additive alternate version of the WordPress.com REST API. Publishes only the 38 endpoints whose contract differs
    from v1.1; clients mix versions per endpoint rather than migrating wholesale.
  humanURL: https://developer.wordpress.com/docs/api/
  baseURL: https://public-api.wordpress.com/rest/v1.2
  tags:
  - Content Management
  - Publishing
  properties:
  - type: OpenAPI
    url: openapi/automattic-wordpress-com-rest-v1-2-openapi.yml
  - type: Overlay
    url: overlays/automattic-wordpress-com-rest-v1-2-overlay.yaml
  - type: Documentation
    url: https://developer.wordpress.com/docs/api/
- name: WordPress.com REST API v1.3
  description: Additive alternate version of the WordPress.com REST API, publishing 19 endpoints including WordPress.com marketplace
    search.
  humanURL: https://developer.wordpress.com/docs/api/
  baseURL: https://public-api.wordpress.com/rest/v1.3
  tags:
  - Content Management
  - Marketplace
  properties:
  - type: OpenAPI
    url: openapi/automattic-wordpress-com-rest-v1-3-openapi.yml
  - type: Overlay
    url: overlays/automattic-wordpress-com-rest-v1-3-overlay.yaml
  - type: Documentation
    url: https://developer.wordpress.com/docs/api/
- name: WordPress.com REST API - wp/v2 namespace
  description: The WordPress core REST API shape as served by WordPress.com, site-scoped at /wp/v2/sites/{site}/. 348 operations
    across posts, pages, comments, media, taxonomies, block types, block patterns, global styles, templates, plugins, themes,
    settings and the WordPress Abilities API. Chosen when portability with self-hosted WordPress matters.
  humanURL: https://developer.wordpress.com/docs/api/
  baseURL: https://public-api.wordpress.com/wp/v2
  tags:
  - Content Management
  - Publishing
  - Open Source
  properties:
  - type: OpenAPI
    url: openapi/automattic-wordpress-com-wp-v2-openapi.yml
  - type: Overlay
    url: overlays/automattic-wordpress-com-wp-v2-overlay.yaml
  - type: Documentation
    url: https://developer.wordpress.com/docs/api/
- name: WordPress.com REST API - wpcom/v2 namespace
  description: The WordPress.com and Jetpack platform extension namespace — 1,716 operations covering hosting and code deployments,
    domains and DNS, plans and checkout, marketplace, agency tooling, Jetpack modules, AI features and the hosted MCP server.
    The largest of the three namespaces.
  humanURL: https://developer.wordpress.com/docs/api/
  baseURL: https://public-api.wordpress.com/wpcom/v2
  tags:
  - Website Hosting
  - Domains
  - E-Commerce
  - Developer Tools
  properties:
  - type: OpenAPI
    url: openapi/automattic-wordpress-com-wpcom-v2-openapi.yml
  - type: Overlay
    url: overlays/automattic-wordpress-com-wpcom-v2-overlay.yaml
  - type: Documentation
    url: https://developer.wordpress.com/docs/api/
- name: WordPress.com MCP Server
  description: Automattic's hosted Model Context Protocol server for WordPress.com. Streamable HTTP transport secured with
    OAuth 2.1 (PKCE S256, dynamic client registration, token rotation, no client secret). Twelve documented tools spanning
    content authoring, site editor context, account and site administration, domains, plans and checkout. Read-only tools
    are enabled by default and write tools must be explicitly turned on. Available on all WordPress.com paid plans.
  humanURL: https://developer.wordpress.com/docs/mcp/
  baseURL: https://public-api.wordpress.com/wpcom/v2/mcp/v1
  tags:
  - Model Context Protocol
  - Developer Tools
  - Content Management
  properties:
  - type: MCPServer
    url: mcp/automattic-mcp.yml
  - type: ToolCrosswalk
    url: mcp/automattic-tool-crosswalk.yml
  - type: Documentation
    url: https://developer.wordpress.com/docs/mcp/
  - type: APIReference
    url: https://developer.wordpress.com/docs/mcp/tools/
- name: Akismet API
  description: Akismet is Automattic's spam-classification service. Six operations — key verification, comment check, submit
    spam, submit ham, key sites and usage limit — authenticated with an Akismet API key. Automattic publishes an OpenAPI 3.0.3
    document for it.
  humanURL: https://akismet.com/development/api/
  baseURL: https://rest.akismet.com
  tags:
  - Spam Filtering
  - Comments
  - Content
  properties:
  - type: OpenAPI
    url: openapi/automattic-akismet-openapi.yml
  - type: Overlay
    url: overlays/automattic-akismet-overlay.yaml
  - type: Documentation
    url: https://akismet.com/development/api/
  - type: SourceCode
    url: https://github.com/Automattic/akismet-api
- name: Jetpack AI-Plugin API
  description: A small OpenAPI-described surface for listing and creating blog posts across a user's Jetpack and WordPress.com
    sites, published alongside the OpenAI plugin manifest at /.well-known/ai-plugin.json.
  humanURL: https://developer.wordpress.com/docs/api/
  baseURL: https://public-api.wordpress.com
  tags:
  - Publishing
  - Content Management
  properties:
  - type: OpenAPI
    url: openapi/automattic-jetpack-ai-plugin-openapi.yaml
  - type: Overlay
    url: overlays/automattic-jetpack-ai-plugin-overlay.yaml
  - type: PluginManifest
    url: well-known/automattic-ai-plugin.json
- name: WordPress VIP Platform API
  description: The GraphQL API for WordPress VIP, Automattic's enterprise WordPress and Node.js platform. Documented operation
    categories cover apps, domains, organizations, users, integrations, security and observability. Introspection is authentication-gated,
    so no SDL is captured.
  humanURL: https://docs.wpvip.com/vip-api/
  baseURL: https://api.wpvip.com/graphql
  tags:
  - Website Hosting
  - Developer Tools
  - Enterprise
  properties:
  - type: GraphQL
    url: graphql/automattic-vip-platform-api.yml
  - type: Documentation
    url: https://docs.wpvip.com/vip-api/
  - type: GettingStarted
    url: https://docs.wpvip.com/vip-api/getting-started
  - type: APIReference
    url: https://docs.wpvip.com/vip-api/reference
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://automattic.com/
- type: DeveloperPortal
  url: https://developer.wordpress.com/
- type: Documentation
  url: https://developer.wordpress.com/docs/api/
- type: APIReference
  url: https://developer.wordpress.com/docs/api/rest-api-reference/
- type: GettingStarted
  url: https://developer.wordpress.com/docs/api/getting-started/
- type: Support
  url: https://wordpress.com/support/
- type: Blog
  url: https://automattic.com/blog/
- type: GitHubOrganization
  url: https://github.com/Automattic
- type: Pricing
  url: https://wordpress.com/pricing/
- type: SignUp
  url: https://developer.wordpress.com/apps/new/
- type: Login
  url: https://wordpress.com/log-in
- type: TermsOfService
  url: https://wordpress.com/tos/
- type: PrivacyPolicy
  url: https://automattic.com/privacy/
- type: StatusPage
  url: https://automatticstatus.com/
- type: Security
  url: https://automattic.com/security/
- type: TrustCenter
  url: security/automattic-trust-center.yml
- type: Compliance
  url: https://wpvip.com/trust/
- type: Authentication
  url: authentication/automattic-authentication.yml
- type: OAuthScopes
  url: scopes/automattic-scopes.yml
- type: OpenIDConnect
  url: well-known/automattic-openid-configuration.json
- type: WellKnown
  url: well-known/automattic-well-known.yml
- type: SecurityTxt
  url: well-known/automattic-security.txt
- type: VulnerabilityDisclosure
  url: security/automattic-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/automattic-domain-security.yml
- type: Conformance
  url: conformance/automattic-conformance.yml
- type: Conventions
  url: conventions/automattic-conventions.yml
- type: ErrorCatalog
  url: errors/automattic-problem-types.yml
- type: Lifecycle
  url: lifecycle/automattic-lifecycle.yml
- type: ChangeLog
  url: changelog/automattic-changelog.yml
- type: ReleaseNotes
  url: https://developer.wordpress.com/changelog/
- type: DataModel
  url: data-model/automattic-data-model.yml
- type: Packages
  url: packages/automattic-packages.yml
- type: SDKs
  url: packages/automattic-packages.yml
- type: CLI
  url: cli/automattic-cli.yml
- type: Components
  url: components/automattic-components.yml
- type: Sandbox
  url: sandbox/automattic-sandbox.yml
- type: Console
  url: https://developer.wordpress.com/docs/api/console/
- type: Webhooks
  url: asyncapi/automattic-wordpress-com-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: AgenticAccess
  url: agentic-access/automattic-agentic-access.yml
- type: LLMsTxt
  url: llms/automattic-llms.txt
- type: MCPServer
  url: mcp/automattic-mcp.yml
- type: ToolCrosswalk
  url: mcp/automattic-tool-crosswalk.yml
- type: SecondaryMarketListing
  url: https://forgeglobal.com/automattic_stock/
x-enrichment:
  date: '2026-07-31'
  status: enriched
  artifacts_added: 48
  pass: local-v1

Where this information came from

This is an independent, third-party profile of Automattic, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.