FuseWP

aid: fusewp
name: FuseWP
description: 'FuseWP is a WordPress automation plugin from the FuseWP Team (ProperFraction) that synchronizes WordPress users,
  customers, members and form leads with more than thirty email marketing platforms and CRMs — including Mailchimp, ActiveCampaign,
  Constant Contact, HubSpot, Klaviyo, Brevo, MailerLite, Salesforce, Zoho CRM, Keap, AWeber, GoHighLevel, SendPulse and Google
  Sheets. It maps WordPress user roles, WooCommerce/EDD orders, LMS enrollments (LearnDash, LifterLMS, Tutor LMS, Sensei),
  membership plugins (MemberPress, Paid Memberships Pro, Restrict Content Pro) and form submissions (Contact Form 7, Gravity
  Forms, WPForms, Fluent Forms) to lists, tags and custom fields in the connected platform. FuseWP is primarily an API CONSUMER
  rather than an API producer: the plugin runs self-hosted inside the customer''s WordPress installation and registers no
  REST routes of its own. Its one first-party HTTP surface is a hosted OAuth broker at auth.fusewp.com that holds FuseWP''s
  OAuth client credentials and brokers the authorization-code and refresh-token exchange for the eleven partner platforms
  that require OAuth.'
image: https://fusewp.com/wp-content/uploads/2023/06/fusewp-wordpress-plugin.png
url: https://raw.githubusercontent.com/api-evangelist/fusewp/refs/heads/main/apis.yml
x-type: company
x-source: harvest:marketing-integration-graph
specificationVersion: '0.20'
created: '2026-08-12'
modified: '2026-08-12'
tags:
- Company
- WordPress
- Email Marketing
- Marketing Automation
- CRM
- Integration
- Data Synchronization
- OAuth
- Plugins
- No Code
apis:
- aid: fusewp:oauth-broker
  name: FuseWP OAuth Broker
  description: 'The hosted OAuth authorization broker FuseWP operates at auth.fusewp.com. The self-hosted FuseWP plugin cannot
    safely hold OAuth client secrets for the partner platforms it connects to, so it delegates the authorization-code and
    refresh-token exchange to this service. GET /{integration_id} (with fwpnonce and redirect_url query parameters) issues
    a 302 to the partner platform''s own authorize endpoint carrying FuseWP''s registered client_id, the auth.fusewp.com redirect_uri
    and the delegated scope set; GET /{integration_id}?refresh_token={token} returns a JSON body with a boolean `success`
    field plus refreshed credentials. Eleven integration ids resolve to a live 302 as probed on 2026-08-12: aweber, birdsend,
    campaignmonitor, constantcontact, copper, gohl (GoHighLevel), hubspot, keap, mailchimp, zohocrm and zohocampaigns. The
    service publishes no OpenAPI, no developer documentation and no /.well-known/ discovery surface; the contract recorded
    here was derived from the GPL-licensed first-party plugin source (src/core/src/Integrations/AbstractIntegration.php) and
    confirmed by live probe.'
  humanURL: https://fusewp.com/docs/
  baseURL: https://auth.fusewp.com
  tags:
  - OAuth
  - Authorization
  - Integration
  properties:
  - type: Authentication
    url: authentication/fusewp-authentication.yml
  - type: OAuthScopes
    url: scopes/fusewp-scopes.yml
  - type: Conventions
    url: conventions/fusewp-conventions.yml
  - type: RateLimits
    url: rate-limits/fusewp-rate-limits.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/fusewp-domain-security.yml
- type: Website
  url: https://fusewp.com/
- type: DeveloperPortal
  url: https://fusewp.com/docs/
- type: Documentation
  url: https://fusewp.com/docs/
- type: GettingStarted
  url: https://fusewp.com/article/installation-activation/
- type: Support
  url: https://fusewp.com/support/
- type: Blog
  url: https://fusewp.com/blog/
- type: GitHubOrganization
  url: https://github.com/fusewp
- type: Pricing
  url: https://fusewp.com/pricing/
- type: SignUp
  url: https://fusewp.com/pricing/
- type: Login
  url: https://fusewp.com/account/
- type: TermsOfService
  url: https://fusewp.com/terms-conditions/
- type: PrivacyPolicy
  url: https://fusewp.com/privacy-policy/
- type: ChangeLog
  url: https://fusewp.com/changelog/
- type: Packages
  url: packages/fusewp-packages.yml
- type: Plans
  url: plans/fusewp-plans-pricing.yml
- type: RateLimits
  url: rate-limits/fusewp-rate-limits.yml
- type: Authentication
  url: authentication/fusewp-authentication.yml
- type: OAuthScopes
  url: scopes/fusewp-scopes.yml
- type: Conventions
  url: conventions/fusewp-conventions.yml
- type: Conformance
  url: conformance/fusewp-conformance.yml
- type: Lifecycle
  url: lifecycle/fusewp-lifecycle.yml
- type: ChangeLog
  url: changelog/fusewp-changelog.yml
- type: LLMsTxt
  url: llms/fusewp-llms.txt
- type: WellKnown
  url: well-known/fusewp-well-known.yml
- type: MCPServer
  url: mcp/fusewp-mcp.yml
x-vouched-by:
- MailerLite
- SendPulse
x-vouch-count: 2
x-enrichment:
  date: '2026-08-12'
  status: enriched
  artifacts_added: 15
  pass: local-v1
  note: FuseWP publishes no OpenAPI and its plugin registers zero REST routes, but STEP 0b contract discovery found two genuine
    first-party HTTP surfaces the provider never documents anywhere — an undocumented OAuth broker at auth.fusewp.com (eleven
    live integration paths, with the delegated scope set readable straight off each 302 Location header) and an OAuth-gated
    MCP endpoint on fusewp.com advertised through RFC 8414 and RFC 9728 well-known metadata. Declaring "no spec" after only
    checking fusewp.com/openapi.json would have missed both.
  evidence:
  - url: https://auth.fusewp.com/mailchimp
    status: 302
  - url: https://fusewp.com/.well-known/oauth-authorization-server/
    status: 200
  - url: https://fusewp.com/wp-json/mcp/mcp-oauth-server
    status: 401
  - url: https://fusewp.com/openapi.json
    status: 404