Everything in Kwazi works through the WordPress REST API, signed webhooks and abilities for AI assistants. Free, also with Kwazi Pro and the add-ons.
Application passwords with HTTP Basic auth. Base URL: /wp-json/kwazi/v1. Every request acts as that user, with the same permissions as in the app.
Lists return items, next_cursor and total. Use updated_since to fetch only what changed.
One error shape with a code and a message, so your code knows what to do.
Events for new contacts, form submissions, bookings and marketing consent. Signed, with retries and a delivery log.
The same actions as abilities, like kwazi/find-contacts and kwazi/book-appointment, through the WordPress MCP adapter.
GET /wp-json/kwazi/v1/openapi.json describes every route, including your own fields and apps. Import it into Postman or a code generator.
Make an application password under Kwazi, then Integrations, then API & keys. Only administrators may use them by default, because application passwords skip two-factor login. Every change is written to the audit log.
curl https://your-site.example/wp-json/kwazi/v1/contacts \
-u "your-username:abcd EFGH ijkl MNOP qrst UVWX"
