WordPress sites connect through the WordPress REST API with a username and an Application Password. Nothing needs to be installed for standard publishing. This guide walks through preparing WordPress, connecting the site and checking the settings afterwards.
Before you start
You are an Owner or Admin of the company in Accounts, or of its agency.
You have administrator access to the WordPress site, or someone who does can create the Application Password.
The REST API is reachable: open
https://your-site.com/wp-jsonin a browser. You should see a JSON response that includeswp/v2.
Step 1: Choose the WordPress user
The platform publishes as this user. Use a user who can create, edit and delete posts, for example with the Editor or Administrator role.
Tip: Create a dedicated user such as "UP-TO-DATE publisher". You can then revoke its access without affecting a real person, and posts are clearly attributed.
Step 2: Create an Application Password
Sign in to WordPress as that user, or as an administrator editing that user.
Go to Users > Profile (or edit the user) and scroll to Application Passwords.
Enter a name, for example "UP-TO-DATE", and add a new application password.
Copy the generated password. WordPress shows it only once.
If the Application Passwords section is missing, a security plugin or the host has turned it off. It must be available for the connection to work.
Step 3: Open Connect a Site
In Accounts, go to Companies > open the company > Websites tab.
Click Connect a Site. If the company already has sites, click Connect New Site.
Under Select your CMS, choose WordPress. It is selected by default.
Step 4: Fill in the fields
Field | What to enter |
|---|---|
WordPress Site URL | The address of the WordPress site, for example |
Email/Username | The WordPress username or email of the user from step 1. |
Application Password | The password from step 2. |
Custom Post Type | Default: |
Step 5: Test the connection
Click Test Connection.
The test checks that
/wp-jsonlistswp/v2, creates a draft called "Test Post" and deletes it again. WordPress may keep that draft in the Trash.When it passes, you see "Test connection successful! Credentials are valid."
The test always uses the standard posts endpoint. It does not check the custom post type.
Step 6 (optional): Enable ACF support
After a passed test, an ACF Support section appears. Tick Enable ACF Support if the site uses the Advanced Custom Fields plugin for its posts, then define which fields the platform fills in the editor that appears. Leave it off for standard posts.
Step 7: Connect
Click Connect.
The window closes and the site appears in the company's Websites list.
Step 8: Check the settings
Go to Websites > open the site > Edit connection.
In Edit Site Settings, check the WordPress settings:
Post Type: make sure it shows your custom post type if you use one. If it shows
posts, enter the right value here.Blog Slug Prefix: the URL part before the post slug, for example
blogfor/blog/my-post. Leave it empty for none.Multilingual Plugin: None, WPML or Polylang.
Click Save Changes.
To change the username, Application Password or site URL later, use the same window. Leave App Password blank to keep the current one.
Multilingual sites
Translation plugin | What to do |
|---|---|
WPML | Install the WPML Translation Linker plugin, then set Multilingual Plugin to WPML. |
Polylang | Set Multilingual Plugin to Polylang. No extra plugin is needed. |
TranslatePress | Install the TranslatePress UTD Integration plugin, then ask the UP-TO-DATE support team to turn on TranslatePress for the site. It isn't in the Multilingual Plugin list. |
Ask the UP-TO-DATE support team for the plugin files. In WordPress, upload them with Plugins > Add New > Upload Plugin and activate them. The handler endpoints only accept users with the edit_posts capability. See Connecting a website: the connection handler step by step.
Common errors
Message | What to check |
|---|---|
"Please enter a valid URL" | The site URL is missing |
"The provided URL does not seem to be a valid WordPress site." |
|
"Authentication failed. Please check your credentials." | Wrong username or Application Password, or a revoked password. Some hosts also strip the login header from API requests; ask the host to allow it. |
"Error: Request failed with status code 403" | A firewall or security plugin blocked the request, or the user may not create posts. |
"Failed to connect to WordPress" | The site couldn't be reached or didn't return valid JSON. |