Developer APIs & PWAAPI Spec8 min read•Updated August 2026
REST API & AJAX Endpoint Reference
Complete API reference for bookings, leads, invoices, e-sign contracts, and PWA push subscriptions.
All endpoints are accessible via WordPress REST API (/wp-json/cora/v1/ or /wp-json/cora-pwa/v1/) and standard AJAX actions.
1. Authentication & Nonces
- REST Requests: Require
X-WP-Nonceheader or Bearer API token. - AJAX Requests: Require
nonce: coraREWPData.ajaxNoncein POST body.
2. API Endpoints Table
| Method | Route / Action | Required Permission | Description |
|---|---|---|---|
GET | /wp-json/cora/v1/leads | cora_view_dashboard | Fetch paginated leads list |
POST | /wp-json/cora/v1/leads | cora_manage_bookings | Create new shoot lead |
POST | /wp-json/cora/v1/invoices | cora_manage_financials | Create 18% GST invoice |
POST | /wp-json/cora/v1/contracts/sign | Public (Token-Based) | Submit SHA-256 e-signature |
POST | /wp-json/cora-pwa/v1/save-subscription | Authenticated User | Store VAPID Web Push subscription |
GET | /wp-json/cora-pwa/v1/version-check | Public | Query active workspace version & changelog |
Have questions about this module?
Our founding engineering team answers developer inquiries directly.