List Web Rules
Last Updated: August 20, 2026Returns the custom web-server rules attached to a site: HTTP header rules (set or unset response headers) and redirect rules (with optional conditions on host, URI, query arg, or device).…
List Site Snapshots
Last Updated: August 20, 2026Returns snapshots created from this site, paginated. SSH keypair references, raw meta, and logs are stripped. The public_url_token is included only for public snapshots — for private snapshots it is…
Get Cache Settings
Last Updated: August 20, 2026Returns which cache layers are active for the site: page cache (full-page or WP cache plugin), object cache (Redis and Object Cache Pro), and Cloudflare edge cache. Settings only —…
Purge Full-Page Cache
Last Updated: August 20, 2026Clears the full-page cache for the site. Requires the write:sites scope.
Purge All Caches
Last Updated: August 20, 2026Purges every supported cache for this site in one call: object cache, Cloudflare edge cache (when enabled), Redis object cache, and Object Cache Pro (when the plugin integration is present).…
Trigger PageSpeed Insights Scan
Last Updated: August 20, 2026Queues a new PageSpeed Insights run for both mobile and desktop strategies. Returns 202 with a scan_uuid that links the two strategy runs. Returns 409 if a scan is already…
List Site Vulnerabilities
Last Updated: August 20, 2026Returns a merged inventory of known vulnerabilities affecting the specified site. Sources include Patchstack (when the addon is enabled) and Wordfence (always available). Ignored entries are excluded by default. Requires…
Get Site Vulnerability Count by Severity
Last Updated: August 20, 2026Returns severity-grouped vulnerability counts (critical/high/medium/low) for the site, plus a combined total and the skipped (ignored) count. Counts come from a single source — Patchstack is preferred over Wordfence (never…
Get SSL Certificate
Last Updated: August 20, 2026Returns details for a single SSL certificate addressed by its own UUID. The raw certificate body and private key are never exposed. Requires the read:sites scope.
Delete SSL Certificate
Last Updated: August 20, 2026Deletes an SSL certificate row by UUID. When the certificate is the parent site's currently active SSL provider, the site's ssl_provider is cleared and nginx is regenerated so HTTPS stops…
