hosting
GET /v1/wordpress/sites/{siteId}/credentials
Who can sign in to this site's WordPress, and where.
Authentication
Send an API key as a bearer token. The key must carry the sites.view permission; a key without it is refused with 403, not 404.
This endpoint takes no organisation id. Your key already identifies the organisation it belongs to, and the response is scoped to it.
Try it
Replace anything in angle brackets with your own values, and the key placeholder with a key from your dashboard.
curl -X GET https://api.zinndigital.com/v1/wordpress/sites/{siteId}/credentials \
-H "Authorization: Bearer zdk_live_…"Signed in? The API console in your dashboard fills in your real organisation id and your own key, and runs the request against the live API so you can see the actual response. Open this endpoint in the API console
Details
The site's WordPress administrators — read **live** from the platform, not from the stored snapshot, because this list is what the rotate form acts on and offering a password reset for a user deleted an hour ago fails confusingly. A stale list is fine on a dashboard and wrong on a form. ⛔⛔ **There is no `password` field and there cannot be one.** WordPress stores a hash; no plaintext exists on our side or theirs. A customer copies the *username* from here and, if they need a password, mints a new one with `rotateWordPressAdminPassword`. Requires `sites.view`.
Parameters
| Name | Type | Required | What it is |
|---|---|---|---|
siteId (path) | Uuid | Yes | Site ID (UUIDv7). |
Response
| Name | Type | Required | What it is |
|---|---|---|---|
admin_url | string | Yes | — |
sso_available | boolean | Yes | Whether this platform can mint a one-click login. Our own fleet writes the SSO signing key into `wp-config.php`; this platform has no shell, so it cannot — and a button offered… |
admins | WordPressAdmin[] | Yes | — |
Errors this endpoint can return
401 · 403 · 404 · 429 · 503