Description
Quick Answer: What is DK Headless API?
DK Headless API is a professional-grade framework that decouples WordPress by disabling the frontend theme layer, prunes default REST endpoints to prevent data scraping, and exposes a secure, high-performance API namespace (dk/v1) designed specifically for modern frontend engines (Next.js, React, Astro, Vue, Svelte).
Key Takeaways
- Instant Decoupling: Turns off the theme template engine (returning
410 Gone) and dequeues all frontend scripts. - ACF & Gutenberg Integration: Natively embeds Advanced Custom Fields (ACF) data and parses Gutenberg blocks into clean API payloads.
- Advanced Caching: Implements smart transient caching that auto-invalidates when posts are updated or deleted.
- Security & Rate Limiting: Features dynamic API Key generation (
X-DK-API-Key) and daily request limiters per IP/key. - Tree-Menu Resolver: Translates complex WP menu hierarchies into clean nested JSON trees.
Why Go Headless with WordPress?
Monolithic WordPress sites face constant performance overheads, plugin bloat, and security vulnerabilities. Decoupling WordPress allows you to use it purely as a content editor while rendering your frontend on edge servers. This results in:
1. Sub-second Load Times: Serving static HTML via CDNs.
2. Improved Security: Hiding the WP database and admin panel behind custom api restrictions.
3. Better Developer Experience: Allowing front-end engineering teams to build with modern UI libraries.
Feature Comparison Table
Feature
Standard WordPress REST
DK Headless API
Frontend Deactivator
No (requires manual code/redirects)
Yes (410 Status + asset dequeuer)
Endpoint Security
Public (scrapers can access /users)
REST Pruning & API Key restrictions
ACF Field Resolution
Requires separate helper plugins
Native & embedded out-of-the-box
Menu Hierarchy
Flat arrays (hard to parse)
Smart tree resolver (nested JSON)
Smart Transient Cache
None (requires external DB queries)
Caching with auto-invalidation on save
Rate Limiter
No rate protection
Daily rate limiting per client IP/Key
🚀 Need Help Designing Your Headless Architecture?
Decoupling WordPress can introduce complex challenges regarding static site generation (SSG), incremental static revalidation (ISR), CORS handling, and preview modes.
If you are an agency, founder, or marketing team looking to build a high-performance headless architecture:
* Book a Free 30-Minute Strategy Session with the Digitized Kosmos engineering team.
* We will audit your current endpoints, optimize your server-side configurations, and help blueprint your Next.js/React revalidation flow.
* 👉 Schedule Free Consultation
Action Checklist for a Successful Headless Launch
- [ ] Verify that your REST API namespace (
dk/v1) is accessible. - [ ] Configure your CORS allowed origin to match your frontend domain.
- [ ] Generate a developer API key and verify header auth.
- [ ] Add your redirect Frontend URL so visitors are guided to your app.
- [ ] Test post-update callbacks to confirm transient cache invalidation.
Screenshots
Installation
Step-by-Step Framework
- Upload & Install: Upload the folder to your
/wp-content/plugins/directory, or install directly via the WordPress Plugin search. - Activation: Activate the plugin.
- Configure Settings: Go to Settings > DK Headless API in your WP Admin Dashboard.
- Setup CORS: Enter your Frontend URL (e.g.
https://myfrontend.com) in the General Settings to allow secure CORS headers. - Secure Your Endpoint: Toggle API Key enforcement, generate an authorization key, and configure your daily rate limits.
FAQ
-
Does this disable the Gutenberg editor?
-
No. The WP Admin dashboard, block editor, Gutenberg previews, login paths, and essential admin REST interfaces are preserved. Only the front-facing theme pages are deactivated.
-
How do I pass the API Key from Next.js / React?
-
If you toggle “Require API Key” in the settings, send the key inside your request headers:
X-DK-API-Key: your_generated_key_here -
Can I use this plugin for free commercially?
-
Yes. The plugin is 100% free, fully functional, and licensed under GPLv2. We do not place quota limits, license-locking mechanisms, or trial periods inside the codebase. All pro feature enhancements live in separate addon branches.
-
How do I clear the cache?
-
The cache engine clears automatically when posts, pages, or custom post types are published, updated, trashed, or deleted. You do not need to manage it manually.
-
Does it support WooCommerce?
-
It supports core custom post type exposure out-of-the-box. Advanced ecommerce integrations (cart hooks, checkout gateways) are best handled using custom controllers or dedicated headless addons.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“DK Headless API” is open source software. The following people have contributed to this plugin.
Contributors
Translate “DK Headless API” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.1
- Renamed namespaces and option prefixes to dkhwp_ and DKHWP\ to fully comply with WordPress.org guidelines.
- Improved security checks for cached REST endpoints in rest_pre_dispatch.
- Strengthened URL input sanitization using esc_url_raw().
- Hardened rate limiting transient keys generation against IP/Key attacks.
- Implemented dynamic developer API Key generator in admin pages.
- Added custom Next.js headless consultation admin notice on settings pages.
- Added fully compliant icons and banners to repository assets.
1.0.0
- Initial release of DK Headless API.
- Decoupled frontend template engine (
410 Gone). - REST endpoint pruning for secure public access.
- Built-in ACF custom fields resolver.
- Built-in smart transient caching with hooks-based flushing.
- Custom Next.js-ready nested tree-menu parser.
- Multi-key authentication manager.
- Daily IP/Key rate limiter.