Lish · Authentication Profile

Lish Authentication

Authentication

Lish secures its APIs with apiKey across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyCateringFood and BeverageFood DeliveryWorkplaceCorporate ServicesContent
Methods: apiKey Schemes: 1 OAuth flows: API key in: header

Security Schemes

anonymous apiKey
· in: header (X-WP-Nonce)

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-19'
method: derived
source: openapi/lish-wordpress-openapi.json
summary:
  types:
  - apiKey
  api_key_in:
  - header
schemes:
- name: anonymous
  type: apiKey
  in: header
  parameter: X-WP-Nonce
  description: The public read surface documented here requires NO credentials — the live index
    reports an empty `authentication` object. Authenticated operations use a cookie plus an
    `X-WP-Nonce` header (same-origin), or HTTP Basic with a WordPress Application Password (`/wp/v2/users/<id>/application-passwords`
    is present in the live index).
  sources:
  - openapi/lish-wordpress-openapi.json