Descrição
Invizo Headless Mode helps teams run WordPress as a headless CMS and API backend for a decoupled frontend built with frameworks such as Next.js, Gatsby, Nuxt, SvelteKit, Remix, Astro, or a custom application.
The plugin can disable the WordPress frontend for public visitors by redirecting frontend routes to your configured site URL. WordPress admin, REST API, AJAX, cron, static assets, and supported API routes remain available.
What this plugin offers
- Disable WP frontend access by redirecting public WordPress routes to your frontend.
- Keep REST API, AJAX, cron, static assets, and WPGraphQL requests available.
- Add strict CORS headers for your frontend origin or origin allowlist.
- Generate signed draft preview links for headless WordPress preview workflows.
- Optional custom admin/login slug for hiding default login URLs.
- Return generic JSON errors for blocked
/wp-admin/and/wp-login.phprequests. - Customize the WordPress login page logo, colors, background image, and back-to-site link visibility.
- Disable XML-RPC, hide the WordPress version, and block common user enumeration routes.
- Disable RSS/Atom feeds, RSD, WLW manifest, oEmbed discovery, shortlinks, and related frontend discovery links.
- Rewrite generated post, page, custom post type, and term permalinks to the headless frontend URL.
- Redirect logout to the frontend and login to WordPress admin.
Privacy and external requests
This plugin does not send tracking data to the plugin author.
When you configure a Front-End URL, the plugin may redirect visitors or logged-out users to that URL according to your settings. CORS headers, logout redirects, permalink rewriting, and preview URLs are also based on URLs that you configure in the plugin settings.
Instalação
- Upload the
invizo-headless-modefolder to/wp-content/plugins/. - Activate the plugin through the Plugins screen in WordPress.
- Go to Settings > Headless Mode.
- Enter your headless frontend URL.
- Review the CORS, preview, security, login, discovery, permalink, and login design settings.
- Save changes.
If you enable permalink restructuring or change the custom admin slug, visit Settings > Permalinks and click Save Changes once to flush rewrite rules.
FAQ
-
Will this disable the WordPress frontend?
-
Yes. When a Front-End URL is configured, public WordPress frontend routes redirect to the same path on your headless frontend. Admin, API, AJAX, cron, and static asset requests remain available.
-
Will this break my REST API?
-
No. REST API requests are excluded from public frontend redirects.
-
Does this support WPGraphQL?
-
Yes. Requests marked by WPGraphQL are excluded from redirects, and the CORS handler can send headers for GraphQL requests.
-
Can this hide wp-admin and wp-login.php?
-
Yes. Set a custom admin slug. Direct logged-out access to
/wp-admin/and/wp-login.phpreturns a generic JSON error and does not reveal the custom login URL. -
What is the Preview Secret?
-
The Preview Secret signs draft preview tokens. Your frontend can verify those tokens before showing unpublished content.
-
What does Restructure Permalinks do?
-
When enabled, generated post, page, custom post type, and term links point to your configured frontend URL instead of the WordPress backend URL.
-
Does the plugin contact invizo.io?
-
No. The author URL is listed as plugin metadata only. The plugin uses the frontend URL that you configure.
Avaliações
There are no reviews for this plugin.
Contribuidores e desenvolvedores
“Invizo Headless Mode” é um software com código aberto. As seguintes pessoas contribuíram para este plugin.
Contribuidores
Traduzir “Invizo Headless Mode” para o seu idioma.
Interessado no desenvolvimento?
Navegue pelo código, dê uma olhada no repositório SVN ou assine o registro de desenvolvimento via RSS.
Registro de alterações
1.0.3
- Automatically trigger outgoing frontend revalidation webhooks when posts, pages, or taxonomy terms (categories/tags) are created, updated, or deleted.
1.0.2
- Fix revalidation tab settings save issues where Debug Mode would fail to save.
- Prevent settings from resetting to zero/empty when saving other tabs.
- Move the revalidation activity log table below the Save Changes button for a cleaner full-width layout.
1.0.1
- Rename plugin and slug to Invizo Headless Mode.
- Remove arbitrary custom CSS input from login page customization.
- Move admin JavaScript output to the WordPress enqueue APIs.
- Clean up readme wording for WordPress.org review.
1.0.0
- Initial release.