WordPress REST API: A Developer’s Field Guide
WordPress ships with a complete JSON API — from core endpoints for posts, pages, media and users, to authentication via nonces and application passwords, to custom routes with register_rest_route() for headless and decoupled use. This field guide covers the endpoints, the auth options, and the pitfalls worth knowing.