# The WordPress docs that matter

> The official documentation, linked to its current version: core handbooks, the block editor, page builders, AI and MCP, REST and WP-CLI.

Source: https://todaywp.com (Today WP, free and read-only). 

## Core handbooks

- [Plugin Handbook](https://developer.wordpress.org/plugins/): Building plugins: hooks, settings, security, internationalization.
- [Theme Handbook](https://developer.wordpress.org/themes/): Block themes, theme.json, templates and patterns.
- [Common APIs](https://developer.wordpress.org/apis/): Options, HTTP, transients, cron, and the other core APIs.
- [Code Reference](https://developer.wordpress.org/reference/): Every function, hook, class and method, with the version it arrived in.
- [Security](https://developer.wordpress.org/apis/security/): Sanitizing, escaping, nonces and capability checks.
- [Coding Standards](https://developer.wordpress.org/coding-standards/): PHP, JavaScript, CSS, HTML and accessibility standards.

## Blocks and the editor

- [Block Editor Handbook](https://developer.wordpress.org/block-editor/): Creating blocks, extending the editor, data and components.
- [block.json metadata](https://developer.wordpress.org/block-editor/reference-guides/block-api/block-metadata/): The recommended way to register a block.
- [Interactivity API](https://developer.wordpress.org/block-editor/reference-guides/interactivity-api/): Front-end interactivity for blocks without a framework.

## Common developer topics

- [Theme Handbook: getting started](https://developer.wordpress.org/themes/getting-started/): Building a block theme: files, templates, theme.json and the tools.
- [Block styles](https://developer.wordpress.org/block-editor/reference-guides/block-api/block-styles/): Registering style variations for a block (register_block_style).
- [My site was hacked (WordPress FAQ)](https://wordpress.org/documentation/article/faq-my-site-was-hacked/): The official first steps after a hack: contact the host, change passwords, restore, update.
- [Hardening WordPress](https://developer.wordpress.org/advanced-administration/security/hardening/): File permissions, keys, admin users and other hardening steps.
- [Brute force attacks](https://developer.wordpress.org/advanced-administration/security/brute-force/): Protecting the login against brute force attacks.
- [Nonces](https://developer.wordpress.org/apis/security/nonces/): Create and verify nonces to protect URLs and forms.
- [REST API authentication](https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/): Cookie, nonce and application password authentication for the REST API.
- [Posts (REST API reference)](https://developer.wordpress.org/rest-api/reference/posts/): The /wp/v2/posts endpoint: list, create, update and delete posts, with every argument.
- [REST API reference](https://developer.wordpress.org/rest-api/reference/): Every core endpoint under /wp/v2/: posts, pages, media, users, terms and the rest.
- [Adding custom REST endpoints](https://developer.wordpress.org/rest-api/extending-the-rest-api/adding-custom-endpoints/): register_rest_route, permission callbacks and responses.
- [WordPress 7.2 release page](https://make.wordpress.org/core/7-2/): The 7.2 development cycle: schedule, release team and dates (wp_now gives the planned date with its source).
- [ServerSideRender](https://developer.wordpress.org/block-editor/reference-guides/packages/packages-server-side-render/): The component that previews a server-rendered block in the editor.
- [Creating dynamic blocks](https://developer.wordpress.org/block-editor/how-to-guides/block-tutorial/creating-dynamic-blocks/): Blocks rendered in PHP at view time (render in block.json, or render_callback).
- [Registration of a block](https://developer.wordpress.org/block-editor/getting-started/fundamentals/registration-of-a-block/): Registering a block with block.json, in PHP and JavaScript.
- [block.json metadata](https://developer.wordpress.org/block-editor/reference-guides/block-api/block-metadata/): Every block.json field, and why it is the recommended way to register a block.
- [register_block_type()](https://developer.wordpress.org/reference/functions/register_block_type/): The PHP function that registers a block from its block.json.
- [PHP compatibility and WordPress versions](https://make.wordpress.org/core/handbook/references/php-compatibility-and-wordpress-versions/): Which PHP versions each WordPress version supports (core only: plugins and themes state only a minimum).
- [WordPress backups](https://developer.wordpress.org/advanced-administration/security/backup/): What to back up (database and files), how often, and where to keep copies.
- [Backing up and restoring the database](https://developer.wordpress.org/advanced-administration/security/backup/database/): Database backups, and restoring one with phpMyAdmin or the MySQL command line.
- [Backing up your WordPress files](https://developer.wordpress.org/advanced-administration/security/backup/files/): Which files to copy (wp-content, wp-config.php) and how.
- [CSS in WordPress](https://wordpress.org/documentation/article/css/): Where to add your own CSS (Additional CSS, the Site Editor, a child theme) and the classes WordPress adds.
- [Styles overview (Site Editor)](https://wordpress.org/documentation/article/styles-overview/): Change colors, typography and layout site-wide in Appearance > Editor > Styles, and add custom CSS, without code.
- [Site Editor](https://wordpress.org/documentation/article/site-editor/): Editing templates, template parts, navigation and styles in a block theme.
- [Email troubleshooting (WooCommerce)](https://woocommerce.com/document/email-faq/): Why order emails are not sent or land in spam, and how to check and fix it.
- [wp_mail()](https://developer.wordpress.org/reference/functions/wp_mail/): How WordPress sends email (through the server unless an SMTP plugin takes over), its filters and failures.
- [Moving WordPress](https://developer.wordpress.org/advanced-administration/upgrade/migrating/): Moving a site to a new host or domain, and changing its URLs safely.
- [wp search-replace](https://developer.wordpress.org/cli/commands/search-replace/): Replace the old URL in the database safely, serialized data included (try --dry-run first).
- [HTTPS for WordPress](https://developer.wordpress.org/advanced-administration/security/https/): Moving a site to HTTPS, and fixing mixed content and redirect loops.
- [Common WordPress errors](https://developer.wordpress.org/advanced-administration/wordpress/common-errors/): The critical error message, Recovery Mode, the white screen, database connection and 500 errors, and what to do for each.
- [Debugging in WordPress](https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/): WP_DEBUG and the debug log, to find which plugin or theme causes an error.
- [Discussion settings](https://wordpress.org/documentation/article/settings-discussion-screen/): Comment approval, links held for moderation, disallowed words and closing comments on old posts.
- [Comment moderation](https://wordpress.org/documentation/article/comment-moderation/): Approving, marking as spam and moderating comments.
- [Spam filtering (Contact Form 7)](https://contactform7.com/spam-filtering/): Contact Form 7's spam protection: the disallowed list, Akismet, reCAPTCHA and Turnstile.
- [Permalinks settings](https://wordpress.org/documentation/article/settings-permalinks-screen/): Settings > Permalinks: the URL structure, and saving it again to rebuild the rewrite rules (fixes most 404s after a move).
- [Apache and .htaccess](https://developer.wordpress.org/advanced-administration/server/web-server/httpd/): The WordPress .htaccess rules and mod_rewrite on Apache.
- [Nginx](https://developer.wordpress.org/advanced-administration/server/web-server/nginx/): WordPress rewrite rules for Nginx (it ignores .htaccess).
- [General settings](https://wordpress.org/documentation/article/settings-general-screen/): Site title, tagline, addresses, timezone, language, and whether anyone can register.
- [Site icon (favicon)](https://wordpress.org/documentation/article/creating-a-favicon/): Set the site icon in Settings, General (WordPress 6.5+), or in the Site Editor or Customizer.
- [Schedule a post](https://wordpress.org/documentation/article/page-post-settings-sidebar/): Pick a future date and time under Publish in the post settings sidebar; the post shows as Scheduled until then.
- [Limit post revisions](https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#specify-the-number-of-post-revisions): WP_POST_REVISIONS in wp-config.php: a number to keep, or false to stop saving revisions.
- [Increase the PHP memory limit](https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#increasing-memory-allocated-to-php): WP_MEMORY_LIMIT and WP_MAX_MEMORY_LIMIT in wp-config.php; the host's PHP limit still caps them.
- [Synced patterns (reusable blocks)](https://wordpress.org/documentation/article/reusable-blocks/): Create, edit and detach synced patterns, formerly reusable blocks.
- [Template hierarchy](https://developer.wordpress.org/themes/templates/template-hierarchy/): Which template file WordPress picks for each page, including custom post type archives and singles.
- [Reading settings](https://wordpress.org/documentation/article/settings-reading-screen/): Choose a static front page or latest posts, posts per page, and search engine visibility.
- [Navigation block (menus)](https://wordpress.org/documentation/article/navigation-block/): Adding and editing menus in a block theme with the Navigation block.
- [Appearance Menus screen](https://wordpress.org/documentation/article/appearance-menus-screen/): Menus in classic themes: Appearance > Menus.
- [Manage widgets](https://wordpress.org/documentation/article/manage-wordpress-widgets/): Adding and arranging widgets in sidebars and other widget areas.
- [Reset your password](https://wordpress.org/documentation/article/resetting-your-password/): Resetting a password from the login screen, the profile, or the database when locked out.
- [Plugin and theme auto-updates](https://wordpress.org/documentation/article/plugins-themes-auto-updates/): Turning automatic updates on or off for each plugin and theme.
- [Tools Import screen](https://wordpress.org/documentation/article/tools-import-screen/): Importing posts, pages and media from another WordPress site or another platform.
- [WordPress in your language](https://developer.wordpress.org/advanced-administration/before-install/in-your-language/): Running WordPress and its admin in another language.
- [Child themes](https://developer.wordpress.org/themes/advanced-topics/child-themes/): Creating a child theme to change a theme without losing the changes on update.
- [Administration menus](https://developer.wordpress.org/plugins/administration-menus/): Adding a top-level or sub menu page to the admin for your plugin.
- [Tutorial: build your first block](https://developer.wordpress.org/block-editor/getting-started/tutorial/): Building a custom block step by step with block.json and @wordpress/create-block.
- [the_content](https://developer.wordpress.org/reference/hooks/the_content/): The filter that changes post content before it is displayed.
- [Cron](https://developer.wordpress.org/plugins/cron/): WP-Cron: scheduling events and intervals.
- [Abilities API](https://developer.wordpress.org/apis/abilities-api/): Registering what a site can do, for agents and MCP.
- [Abilities API PHP reference](https://developer.wordpress.org/apis/abilities-api/php-reference/): wp_register_ability, wp_register_ability_category and their hooks, with every argument.
- [Disable the plugin and theme file editor](https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#disable-the-plugin-and-theme-file-editor): DISALLOW_FILE_EDIT in wp-config.php removes the code editors from the admin.
- [Typography in theme.json](https://developer.wordpress.org/themes/global-settings-and-styles/settings/typography/): Font families, sizes and font faces in theme.json.
- [Template parts](https://developer.wordpress.org/themes/templates/template-parts/): Reusable parts of a block theme such as the header and the footer.
- [File permissions](https://developer.wordpress.org/advanced-administration/server/file-permissions/): Safe file and folder permissions for WordPress on the server.
- [Database table prefix](https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#table-prefix): The $table_prefix setting in wp-config.php.
- [is_user_logged_in()](https://developer.wordpress.org/reference/functions/is_user_logged_in/): Checking whether the current visitor is logged in.
- [login_redirect](https://developer.wordpress.org/reference/hooks/login_redirect/): The filter that sets where users land after logging in.
- [add_role()](https://developer.wordpress.org/reference/functions/add_role/): Creating a custom role with its capabilities (run once, on plugin activation).
- [Roles and Capabilities (for site owners)](https://wordpress.org/documentation/article/roles-and-capabilities/): What Administrators, Editors, Authors, Contributors and Subscribers can each do.
- [Roles and capabilities](https://developer.wordpress.org/plugins/users/roles-and-capabilities/): Roles, capabilities and checking them.
- [Transients](https://developer.wordpress.org/apis/transients/): Temporary cached data with an expiration.
- [Caching](https://developer.wordpress.org/advanced-administration/performance/cache/): Page, object and browser caching for WordPress.
- [Settings API](https://developer.wordpress.org/plugins/settings/settings-api/): Settings pages, sections and fields.
- [Options API](https://developer.wordpress.org/apis/options/): Storing and reading settings in the options table.
- [Registering custom post types](https://developer.wordpress.org/plugins/post-types/registering-custom-post-types/): register_post_type and its arguments.
- [Shortcodes](https://developer.wordpress.org/plugins/shortcodes/): Creating and registering shortcodes.
- [Sanitizing data](https://developer.wordpress.org/apis/security/sanitizing/): Cleaning user input before saving it.
- [Escaping data](https://developer.wordpress.org/apis/security/escaping/): Escaping output to prevent XSS.
- [HTTP API](https://developer.wordpress.org/plugins/http-api/): wp_remote_get, wp_remote_post and responses.
- [Internationalization](https://developer.wordpress.org/plugins/internationalization/): Making plugins translatable.
- [Block Bindings API](https://developer.wordpress.org/block-editor/reference-guides/block-api/block-bindings/): Connecting block attributes to custom fields and other sources.
- [Metadata](https://developer.wordpress.org/plugins/metadata/): Post, user and term meta.
- [AJAX](https://developer.wordpress.org/plugins/javascript/ajax/): AJAX requests in plugins (admin-ajax and nonces).
- [theme.json: global settings and styles](https://developer.wordpress.org/block-editor/how-to-guides/themes/global-settings-and-styles/): Settings and styles for block themes in theme.json.
- [Block patterns](https://developer.wordpress.org/themes/features/block-patterns/): Registering and using block patterns.
- [wp core update-db](https://developer.wordpress.org/cli/commands/core/update-db/): Runs the database upgrade after a core update; --network does every site of a multisite.
- [Network Admin](https://developer.wordpress.org/advanced-administration/multisite/admin/): Updates, plugins and themes for a whole network: what the Network Admin screens do.
- [Upgrading WordPress](https://developer.wordpress.org/advanced-administration/upgrade/upgrading/): The official steps for a core upgrade, backup first.
- [Multisite](https://developer.wordpress.org/advanced-administration/multisite/): Creating and running a WordPress network.
- [WP-CLI commands](https://developer.wordpress.org/cli/commands/): Every WP-CLI command and its options.
- [User metadata](https://developer.wordpress.org/plugins/users/working-with-user-metadata/): Storing data per user.
- [Custom taxonomies](https://developer.wordpress.org/plugins/taxonomies/working-with-custom-taxonomies/): register_taxonomy and working with terms.
- [Admin menus](https://developer.wordpress.org/plugins/administration-menus/top-level-menus/): Adding top-level and sub-menus in the admin.
- [Including CSS and JavaScript](https://developer.wordpress.org/themes/classic-themes/basics/including-css-javascript/): wp_enqueue_script and wp_enqueue_style.
- [Uninstall methods](https://developer.wordpress.org/plugins/plugin-basics/uninstall-methods/): Cleaning up when a plugin is deleted.
- [Heartbeat API](https://developer.wordpress.org/plugins/javascript/heartbeat-api/): The admin heartbeat: polling the server from the browser.
- [Hooks: actions and filters](https://developer.wordpress.org/plugins/hooks/): How add_action and add_filter work.
- [REST API Handbook](https://developer.wordpress.org/rest-api/): The REST API: routes, endpoints, authentication and extending it.

## Popular plugins

- [HPOS recipe book (WooCommerce)](https://developer.woocommerce.com/docs/features/orders/high-performance-order-storage/recipe-book/): High-Performance Order Storage: declaring compatibility (FeaturesUtil::declare_compatibility) and moving to the order CRUD APIs.
- [Payment methods in the Checkout block (WooCommerce)](https://developer.woocommerce.com/docs/block-development/extensible-blocks/cart-and-checkout-blocks/checkout-payment-methods/payment-method-integration/): Registering a payment method for the block-based Cart and Checkout (PHP integration plus registerPaymentMethod).
- [Payment Gateway API (WooCommerce)](https://developer.woocommerce.com/docs/features/payments/payment-gateway-api/): Building a payment gateway with WC_Payment_Gateway.
- [WooCommerce REST API](https://woocommerce.github.io/woocommerce-rest-api-docs/): The WooCommerce REST API reference (wc/v3): orders, products, customers.
- [WooCommerce developer docs](https://developer.woocommerce.com/docs/): Official WooCommerce developer documentation: extensions, blocks, features and APIs.
- [ACF Blocks (Advanced Custom Fields)](https://www.advancedcustomfields.com/resources/create-your-first-acf-block/): Building blocks with ACF and block.json.
- [Register ACF fields via PHP](https://www.advancedcustomfields.com/resources/register-fields-via-php/): acf_add_local_field_group: field groups defined in code.
- [ACF developer resources](https://www.advancedcustomfields.com/resources/): Official ACF documentation: functions, field types, filters, blocks and the REST API.
- [Yoast SEO developer portal](https://developer.yoast.com/): Yoast SEO APIs and filters (wpseo_*), including the Schema API.
- [Gravity Forms REST API v2](https://docs.gravityforms.com/rest-api-v2/): Forms and entries over the Gravity Forms REST API (gf/v2).
- [Gravity Forms developer docs](https://docs.gravityforms.com/category/developers/): Hooks (gform_after_submission and the rest), add-on framework and APIs.
- [Configuring caching plugins for WooCommerce](https://developer.woocommerce.com/docs/best-practices/performance/configuring-caching-plugins/): Which pages and cookies to exclude from page caching (cart, checkout, my account) so a shop keeps working.

## WordPress.com

- [Form block (WordPress.com)](https://wordpress.com/support/wordpress-editor/blocks/form-block/): Contact forms on WordPress.com, with the built-in Form block.
- [SEO tools (WordPress.com)](https://wordpress.com/support/seo/seo-tools/): Built-in SEO tools on WordPress.com.
- [WordPress.com Support](https://wordpress.com/support/): Help for sites hosted on WordPress.com, where the host runs core and PHP.

## Page builders

- [Elementor](https://developers.elementor.com/docs/): Custom widgets, controls, dynamic tags and hooks. Official MCP: https://elementor.com/mcp/
- [Divi](https://dev.elegantthemes.com/): Divi 5 modules, extensions and the builder APIs.
- [Beaver Builder](https://docs.wpbeaverbuilder.com/): Custom modules, hooks and filters. Official MCP: https://docs.wpbeaverbuilder.com/bb-ai/build/build-with-mcp
- [Bricks](https://academy.bricksbuilder.io/): Elements, query loops, custom elements and hooks.
- [Breakdance](https://breakdance.com/documentation/): User guide and developer docs, including custom elements. Official MCP: https://breakdance.com/documentation/settings/agents-mcp/
- [Oxygen](https://oxygenbuilder.com/documentation/): Oxygen 6 docs, by the team behind Breakdance. Official MCP: https://oxygenbuilder.com/documentation/settings/agents-mcp/
- [WPBakery](https://kb.wpbakery.com/): Knowledge base, including the inner API for custom elements.

## AI and MCP

- [Abilities API](https://developer.wordpress.org/apis/abilities-api/): Register what a site can do, so agents and other code can call it.
- [AI Client in WordPress 7.0](https://make.wordpress.org/core/2026/03/24/introducing-the-ai-client-in-wordpress-7-0/): wp_ai_client_prompt() and provider plugins.
- [MCP Adapter](https://github.com/WordPress/mcp-adapter): The official plugin that exposes abilities to MCP clients.

## Tools and operations

- [REST API Handbook](https://developer.wordpress.org/rest-api/): Routes, authentication and extending the REST API.
- [WP-CLI commands](https://developer.wordpress.org/cli/commands/): Every WP-CLI command and its options.
- [Advanced Administration](https://developer.wordpress.org/advanced-administration/): Hosting, performance, security hardening and debugging.
- [WordPress Playground](https://wordpress.github.io/wordpress-playground/): A full WordPress in the browser, for testing and demos.

For a function, hook or class, call the `wp_docs` tool: it searches developer.wordpress.org live.