Documentation

Ingestics documentation, from first install to enterprise scale.

Everything you need to connect a source, map the fields, control quality, and publish—covering the Free, Lite, Pro and Business editions.

Quick answer

Ingestics is a complete content-automation pipeline for WordPress. It fetches from REST APIs and RSS/Atom feeds, maps and filters every item, optionally rewrites and translates, then publishes native WordPress posts—with deduplication, scheduling, attribution and full activity logging. This documentation covers setup, every capability by tier, and the security model.

Getting started

Install and connect your first source

01

Install & activate

Upload the plugin ZIP under Plugins, Add New, Upload; activate it; open the new Ingestics menu. The Setup Wizard launches on first run and the Free tier works immediately.

02

Licensing

Ingestics is Freemius-integrated. Open the License tab to upgrade or manage your plan; your tier is resolved from the license state and enforced by the feature gate. Existing providers, posts and settings are preserved through upgrades.

03

Add an API provider

Providers, Add API Provider: enter the endpoint URL and method, choose the response format, set authentication (all credentials are encrypted on save), map response fields with the JSON Path Selector, then Fetch Now.

04

Add an RSS provider

Providers, Add RSS Provider: enter the feed URL (or use Auto-Discovery from a site URL on Lite+), configure full-text extraction if the feed is truncated, set post status and type, then Fetch Now.

05

Preview & publish

Use Call Preview to inspect the planned request and the last call (secrets masked), run a live test on Lite+, then publish live or hold items as drafts for review.

The pipeline

How every item is processed

Each fetched item flows through the same controlled sequence—no blind scraping.

1. Fetch

Bounded, durable, resumable background jobs pull data with leases, chunking and crash-recovery checkpoints.

2. Map

JSON-path, XML-path or CSV-column mapping into title, content, excerpt, URL, image, date and taxonomy.

3. Filter & dedupe

Quality rules (6 on Pro, 14 on Business) plus deduplication by source URL or title—skip, draft or reject.

4. Transform

Optional AI rewrite then translation, with strict guardrails that force-draft on failure (Business).

5. Publish

Native posts, custom fields and taxonomies, with source attribution and featured-image sideloading.

6. Display

Show output through shortcodes, blocks, template tags, Elementor, Bricks and grid/carousel/ticker layouts.

Sources & formats

What Ingestics can read

Connect any reachable HTTP or HTTPS REST API, plus RSS and Atom feeds. Responses are parsed as JSON, XML, RSS, CSV, HTML or plain text, with auto-detection from the Content-Type on Business. Google Sheets share and edit URLs are auto-normalised to CSV export endpoints. HTTP methods GET, POST, PUT, PATCH and DELETE are supported (HEAD and OPTIONS via a compatibility toggle).

Formats
JSON, XML, RSS/Atom, CSV, HTML, plain text; auto-detect (Business)
Methods
GET, POST, PUT, PATCH, DELETE (HEAD/OPTIONS optional)
Sheets
Google Sheets CSV URLs, auto-normalised
Pagination
Page and offset (Lite+); cursor / next-token (Pro+)
Authentication

Every auth mode, by tier

All credentials are stored encrypted at rest and masked in previews and logs.

None
Open / public APIs — Free+
API key
Header or query parameter — Free+
Bearer token
Authorization: Bearer — Free+
HTTP Basic
Base64 username:password — Free+
OAuth2 client credentials
Machine-to-machine, auto-refresh — Lite+
OAuth2 authorization code
User-delegated, refresh + PKCE (S256) — Pro+
AWS SigV4
Native Signature V4 signing, no external SDK — Business
Configuration guides

Set up each capability

Scheduled fetching

Cron intervals of 1h/2h/4h/6h/24h (Lite+), 12h and a custom hour-based interval (Pro+; 0.25–168h), and separate API/RSS schedules (Business).

Provider rotation

Fetch one provider per cron run in sequence to spread API load; Business keeps independent API and RSS rotation queues.

Query builder

Build country, category, language and domain parameters visually—no URL editing (Pro+).

Pagination

Page/offset iteration (Lite+) and cursor/next-token pagination with per-adapter defaults (Pro+); caching is bypassed for paginated runs.

OAuth2 setup

Enter client ID/secret and token URL; for auth-code, copy the callback redirect URI into your OAuth app, then Authorize.

Content filters

Enable rules and set each to reject, draft or publish; reject beats draft beats publish. 6 core rules on Pro, full 14 on Business.

Event triggers

POST to /wp-json/ingestics/v1/trigger with the X-AAPI-Webhook-Secret header (Pro+); fetch_type of api, rss, both or publish.

AI rewrite

Enable per field with OpenAI, Anthropic, Gemini or OpenRouter; configurable character limits; strict mode force-drafts failures (Business).

Translation

DeepL, Google, LibreTranslate or Azure (plus the AI providers); runs after rewrite in the pipeline (Business).

Display feeds

Embed with the auto_api_feed or aapi_feed shortcode, the ingestics/feed block, or template tags; grid, carousel and ticker layouts.

Activity log

Every run records fetched, created, updated, filtered, duplicate and error counts; clear it, or export JSON/CSV/NDJSON on Business.

Health monitoring

Per-provider last status, latency, item counts and consecutive failures, with failure digests by email or Slack (Pro+).

Security

How your data and credentials are protected

Encrypted secret vaultEvery API key, OAuth token and webhook secret is stored AES-encrypted at rest (aapi_sec_v1: prefix) with a random IV per secret; legacy plaintext is migrated on first read.
SSRF protectionRemote URLs are normalised and validated; private, reserved and link-local IP targets are blocked by default, with a filter escape hatch for controlled environments.
Secret maskingAuth headers, keys and secrets are masked in every preview, live-test output and stored snapshot.
Durable & crash-safeRenewable fetch leases, publication heartbeats, deterministic recovery identities and connection-scoped locks prevent duplicate creation across crashes.
Data-preserving uninstallDeactivation and uninstall clear only schedules and locks—your providers, credentials, settings, logs and published content are preserved.
Admin-only outboundNo third-party service is contacted unless you enable and configure it; normal source fetching and licensing operate as part of the configured workflow.
Get started

Put the documentation to work

Start free and connect your first source in minutes.