Skip to content

REST API Reference

EmDash exposes a REST API at /_emdash/api/ for content management, media uploads, and schema operations.

API requests require authentication via Bearer token:

Authorization: Bearer <token>

Generate tokens through the admin interface or programmatically.

All responses follow a consistent format:

// Success
{
"success": true,
"data": { ... }
}
// Error
{
"success": false,
"error": {
"code": "ERROR_CODE",
"message": "Human-readable message",
"details": { ... }
}
}
GET /_emdash/api/content/:collection
ParameterTypeDescription
collectionstringCollection slug (path)
cursorstringPagination cursor (query)
limitnumberItems per page (query, default: 50)
statusstringFilter by status (query)
orderBystringField to sort by (query)
orderstringSort direction: asc or desc (query)
{
"success": true,
"data": {
"items": [
{
"id": "01HXK5MZSN...",
"type": "posts",
"slug": "hello-world",
"data": { "title": "Hello World", ... },
"status": "published",
"createdAt": "2025-01-24T12:00:00Z",
"updatedAt": "2025-01-24T12:00:00Z"
}
],
"nextCursor": "eyJpZCI6..."
}
}
GET /_emdash/api/content/:collection/:id
{
"success": true,
"data": {
"item": {
"id": "01HXK5MZSN...",
"type": "posts",
"slug": "hello-world",
"data": { "title": "Hello World", ... },
"status": "published",
"createdAt": "2025-01-24T12:00:00Z",
"updatedAt": "2025-01-24T12:00:00Z"
}
}
}
POST /_emdash/api/content/:collection
Content-Type: application/json
{
"data": {
"title": "New Post",
"content": [...]
},
"slug": "new-post",
"status": "draft"
}
{
"success": true,
"data": {
"item": { ... }
}
}
PATCH /_emdash/api/content/:collection/:id
Content-Type: application/json
{
"data": {
"title": "Updated Title"
},
"status": "published"
}
DELETE /_emdash/api/content/:collection/:id
{
"success": true,
"data": {
"success": true
}
}
GET /_emdash/api/media
ParameterTypeDescription
cursorstringPagination cursor
limitnumberItems per page (default: 20)
mimeTypestringFilter by MIME type prefix
{
"success": true,
"data": {
"items": [
{
"id": "01HXK5MZSN...",
"filename": "photo.jpg",
"mimeType": "image/jpeg",
"size": 102400,
"width": 1920,
"height": 1080,
"url": "https://cdn.example.com/photo.jpg",
"createdAt": "2025-01-24T12:00:00Z"
}
],
"nextCursor": "eyJpZCI6..."
}
}
GET /_emdash/api/media/:id
POST /_emdash/api/media
Content-Type: application/json
{
"filename": "photo.jpg",
"mimeType": "image/jpeg",
"size": 102400,
"width": 1920,
"height": 1080,
"storageKey": "uploads/photo.jpg"
}
PATCH /_emdash/api/media/:id
Content-Type: application/json
{
"alt": "Photo description",
"caption": "Photo caption"
}
DELETE /_emdash/api/media/:id
GET /_emdash/api/media/file/:key

Serves the actual file content. For local storage only.

GET /_emdash/api/content/:collection/:entryId/revisions
ParameterTypeDescription
limitnumberMax revisions to return (default: 50)
{
"success": true,
"data": {
"items": [
{
"id": "01HXK5MZSN...",
"collection": "posts",
"entryId": "01HXK5MZSN...",
"data": { ... },
"createdAt": "2025-01-24T12:00:00Z"
}
],
"total": 5
}
}
GET /_emdash/api/revisions/:revisionId
POST /_emdash/api/revisions/:revisionId/restore

Restores content to this revision’s state and creates a new revision.

GET /_emdash/api/schema/collections
{
"success": true,
"data": {
"items": [
{
"id": "01HXK5MZSN...",
"slug": "posts",
"label": "Posts",
"labelSingular": "Post",
"supports": ["drafts", "revisions", "preview"]
}
]
}
}
GET /_emdash/api/schema/collections/:slug
ParameterTypeDescription
includeFieldsbooleanInclude field definitions (query)
POST /_emdash/api/schema/collections
Content-Type: application/json
{
"slug": "products",
"label": "Products",
"labelSingular": "Product",
"description": "Product catalog",
"supports": ["drafts", "revisions"]
}
PATCH /_emdash/api/schema/collections/:slug
Content-Type: application/json
DELETE /_emdash/api/schema/collections/:slug
ParameterTypeDescription
forcebooleanDelete even if collection has content (query)
GET /_emdash/api/schema/collections/:slug/fields
POST /_emdash/api/schema/collections/:slug/fields
Content-Type: application/json
{
"slug": "price",
"label": "Price",
"type": "number",
"required": true,
"validation": {
"min": 0
}
}
PATCH /_emdash/api/schema/collections/:collectionSlug/fields/:fieldSlug
Content-Type: application/json
DELETE /_emdash/api/schema/collections/:collectionSlug/fields/:fieldSlug
POST /_emdash/api/schema/collections/:slug/fields/reorder
Content-Type: application/json
{
"fieldSlugs": ["title", "content", "author", "publishedAt"]
}
GET /_emdash/api/schema
Accept: application/json
GET /_emdash/api/schema?format=typescript
Accept: text/typescript

Returns TypeScript interfaces for all collections.

GET /_emdash/api/plugins
GET /_emdash/api/plugins/:pluginId
POST /_emdash/api/plugins/:pluginId/enable
POST /_emdash/api/plugins/:pluginId/disable
CodeHTTP StatusDescription
NOT_FOUND404Resource not found
VALIDATION_ERROR400Invalid input data
UNAUTHORIZED401Missing or invalid token
FORBIDDEN403Insufficient permissions
CONTENT_LIST_ERROR500Failed to list content
CONTENT_CREATE_ERROR500Failed to create content
CONTENT_UPDATE_ERROR500Failed to update content
CONTENT_DELETE_ERROR500Failed to delete content
MEDIA_LIST_ERROR500Failed to list media
MEDIA_CREATE_ERROR500Failed to create media
SCHEMA_ERROR400Schema operation failed
DUPLICATE_SLUG409Slug already exists
RESERVED_SLUG400Slug is reserved
GET /_emdash/api/search?q=hello+world
ParameterTypeDescription
qstringSearch query (required)
collectionsstringComma-separated collection slugs
statusstringFilter by status (default: published)
limitnumberMax results (default: 20)
cursorstringPagination cursor
{
"results": [
{
"collection": "posts",
"id": "01HXK5MZSN...",
"slug": "hello-world",
"title": "Hello World",
"snippet": "...this is a <mark>hello</mark> <mark>world</mark> example...",
"score": 0.95
}
],
"nextCursor": "eyJvZmZzZXQiOjIwfQ"
}
GET /_emdash/api/search/suggest?q=hel&limit=5

Returns prefix-matched titles for autocomplete.

POST /_emdash/api/search/rebuild

Rebuild FTS index for all or specific collections.

GET /_emdash/api/search/stats

Returns indexed document counts per collection.

GET /_emdash/api/sections
GET /_emdash/api/sections?source=theme
GET /_emdash/api/sections?search=newsletter
GET /_emdash/api/sections/:slug
POST /_emdash/api/sections
Content-Type: application/json
{
"slug": "my-section",
"title": "My Section",
"keywords": ["keyword1"],
"content": [...]
}
PUT /_emdash/api/sections/:slug
DELETE /_emdash/api/sections/:slug
GET /_emdash/api/settings
PUT /_emdash/api/settings
Content-Type: application/json
{
"siteTitle": "My Site",
"tagline": "A great site",
"postsPerPage": 10
}
GET /_emdash/api/menus
GET /_emdash/api/menus/:name
POST /_emdash/api/menus
Content-Type: application/json
{
"name": "footer",
"label": "Footer Navigation"
}
PUT /_emdash/api/menus/:name
DELETE /_emdash/api/menus/:name
POST /_emdash/api/menus/:name/items
Content-Type: application/json
{
"type": "page",
"referenceCollection": "pages",
"referenceId": "page_about",
"label": "About Us"
}
POST /_emdash/api/menus/:name/reorder
Content-Type: application/json
{
"items": [
{ "id": "item_1", "parentId": null, "sortOrder": 0 },
{ "id": "item_2", "parentId": null, "sortOrder": 1 },
{ "id": "item_3", "parentId": "item_2", "sortOrder": 0 }
]
}
GET /_emdash/api/taxonomies
POST /_emdash/api/taxonomies
Content-Type: application/json
{
"name": "genre",
"label": "Genres",
"labelSingular": "Genre",
"hierarchical": true,
"collections": ["books", "movies"]
}
GET /_emdash/api/taxonomies/:name/terms
POST /_emdash/api/taxonomies/:name/terms
Content-Type: application/json
{
"slug": "tutorials",
"label": "Tutorials",
"parentId": "term_abc",
"description": "How-to guides"
}
PUT /_emdash/api/taxonomies/:name/terms/:slug
DELETE /_emdash/api/taxonomies/:name/terms/:slug
POST /_emdash/api/content/:collection/:id/terms/:taxonomy
Content-Type: application/json
{
"termIds": ["term_news", "term_featured"]
}
GET /_emdash/api/widget-areas
GET /_emdash/api/widget-areas/:name
POST /_emdash/api/widget-areas
Content-Type: application/json
{
"name": "sidebar",
"label": "Main Sidebar",
"description": "Appears on posts"
}
DELETE /_emdash/api/widget-areas/:name
POST /_emdash/api/widget-areas/:name/widgets
Content-Type: application/json
{
"type": "content",
"title": "About",
"content": [...]
}
PUT /_emdash/api/widget-areas/:name/widgets/:id
DELETE /_emdash/api/widget-areas/:name/widgets/:id
POST /_emdash/api/widget-areas/:name/reorder
Content-Type: application/json
{
"widgetIds": ["widget_1", "widget_2", "widget_3"]
}
GET /_emdash/api/admin/users
GET /_emdash/api/admin/users?role=40
GET /_emdash/api/admin/users?search=john
GET /_emdash/api/admin/users/:id
PATCH /_emdash/api/admin/users/:id
Content-Type: application/json
{
"name": "John Doe",
"role": 40
}
POST /_emdash/api/admin/users/:id/enable
POST /_emdash/api/admin/users/:id/disable
GET /_emdash/api/setup/status

Returns whether setup is complete and if users exist.

POST /_emdash/api/auth/passkey/options

Get WebAuthn authentication options.

POST /_emdash/api/auth/passkey/verify
Content-Type: application/json
{
"id": "credential-id",
"rawId": "...",
"response": {...},
"type": "public-key"
}

Verify passkey and create session.

POST /_emdash/api/auth/magic-link/send
Content-Type: application/json
{
"email": "user@example.com"
}
GET /_emdash/api/auth/magic-link/verify?token=xxx
POST /_emdash/api/auth/logout
GET /_emdash/api/auth/me
POST /_emdash/api/auth/invite
Content-Type: application/json
{
"email": "newuser@example.com",
"role": 30
}
GET /_emdash/api/auth/passkey

List user’s passkeys.

POST /_emdash/api/auth/passkey/register/options
POST /_emdash/api/auth/passkey/register/verify

Register new passkey.

PATCH /_emdash/api/auth/passkey/:id
Content-Type: application/json
{
"name": "MacBook Pro"
}

Rename passkey.

DELETE /_emdash/api/auth/passkey/:id

Delete passkey.

POST /_emdash/api/import/wordpress/analyze
Content-Type: multipart/form-data
file: <WXR file>
POST /_emdash/api/import/wordpress/execute
Content-Type: application/json
{
"analysisId": "...",
"options": {
"includeMedia": true,
"includeTaxonomies": true,
"includeMenus": true
}
}

API endpoints may be rate-limited based on deployment configuration. When rate-limited, responses include:

HTTP/1.1 429 Too Many Requests
Retry-After: 60

The API supports CORS for browser requests. Configure allowed origins in your deployment.