- List and display posts, pages, and custom post types
- Upload and manage media library assets
- Read site settings, categories, tags, and user profiles
- Call REST routes added by plugins installed on your site
- Build headless CMS experiences on self-hosted WordPress
Common use cases and example apps
These examples show what you can build with WordPress (self-hosted), each with a prompt to start from.How to connect WordPress (self-hosted)
Who can create WordPress (self-hosted) connections depends on your plan and workspace settings. App + chat connectors are available by default on Free, Pro, and Business plans. On Enterprise plans, they are effectively disabled at first: Who can create connections and clients defaults to No one until an admin changes it in Connectors → Admin settings → App + chat connectors. You can create multiple WordPress connections using different sites or Application Passwords, which is useful for separating environments (for example, staging and production) or connecting multiple self-hosted sites. When the connection is created, you can link it to the projects where you want to use it. Anyone building in a project can ask Lovable in chat to link their project to it.Prerequisites
Before connecting WordPress (self-hosted), make sure you have:- A self-hosted WordPress site with HTTPS enabled
- WordPress 5.6 or later (Application Passwords require this version)
- Non-plain WordPress permalinks enabled for REST API routes
- A WordPress user account with the permissions your app needs
- A WordPress Application Password for that user
- Permission to create connections in your Lovable workspace (see Who can create connections and clients)
All API requests made through this connector run against your WordPress site. Hosting, plugins, and site-related costs are handled outside Lovable.
Step 1: Get a WordPress Application Password
A WordPress Application Password lets your Lovable app authenticate with the WordPress REST API using HTTP Basic auth. The connected WordPress user’s role controls what the connection can read or change. To create a WordPress Application Password:1
Open your WordPress admin dashboard
Sign in to the WordPress admin for the site you want to connect.
2
Open the user profile
Go to Users → Profile if you are creating a password for your own account. To create a password for another user, go to Users → All Users, open that user, and edit their profile.
3
Create an Application Password
Scroll to Application Passwords. Enter a name for the application, for example
Lovable integration, then click Add New Application Password.4
Copy the password
Copy the generated password and store it securely. WordPress shows it once. You can paste it with or without spaces.
5
Note your site URL and username
Note the HTTPS URL of your WordPress site (for example,
https://blog.example.com) and the WordPress username for the account you used.Step 2: Connect WordPress (self-hosted) to Lovable
You can create multiple connections using different sites or Application Passwords.1
Open WordPress (self-hosted) in Connectors
Open Connectors and select WordPress (self-hosted). For the other places to open the catalog from, see Where to find connectors.
2
Add a connection
Click Add connection.
3
Configure the connection
- Display name: name the connection, for example
WordPress Prod. This name is only used inside Lovable to identify the connection. - Site URL: enter the HTTPS URL of your WordPress site, for example
https://blog.example.com. You can enter the site root or a REST discovery URL such ashttps://blog.example.com/wp-json. - Username: enter the WordPress username for the Application Password.
- Application password: paste the Application Password you generated in WordPress.
4
Choose who can use this connection
Under Who can use this connection, decide who in your workspace can use the connection. You start as the only person with access:
- Only you (default): leave the access list as is; only you can use the connection and its associated data.
- Invite specific people: add workspace members by email; only you and the people you add can use the connection and its associated data.
- Invite entire workspace: click Invite entire workspace to make the connection available to everyone in your Lovable workspace.
5
Connect
Click Connect. Lovable verifies the credentials against your site’s REST API before saving the connection.
Working with WordPress permalinks and REST API routes
WordPress REST API routes require permalinks that are not set to Plain. If verification fails with a route error such asrest_no_route, check that pretty permalinks are enabled under Settings → Permalinks in WordPress admin.
Lovable accepts your site root URL or a REST discovery URL and connects to the WordPress REST API v2 path (/wp-json/wp/v2). Your site must use HTTPS in the Site URL field.
Routes outside the core wp/v2 namespace, such as those added by plugins or a custom plugin on your site, are reachable through the site’s REST root. Tell Lovable which plugin API you want to use and it calls the right route for you.
The connector verifies credentials by calling the WordPress users/me endpoint. If verification fails, confirm the username and Application Password match, the user still exists, and the password has not been revoked in WordPress.
Limitations
The WordPress (self-hosted) connector cannot:- Connect to WordPress.com hosted sites. Use the WordPress.com connector for those sites.
- Create Application Passwords or change WordPress user roles for you. Configure these in WordPress admin first.
- Bypass the permissions of the connected WordPress user account.
- Configure WordPress permalinks, hosting, SSL, plugins, or site settings for you.
- Replace the WooCommerce connector for store operations. Plugin routes on your site are reachable, but the WooCommerce connector is the recommended path for products, orders, and customers.
- Refresh or rotate Application Passwords automatically. To rotate credentials, create a new Application Password in WordPress and update the Lovable connection.
- Support per-end-user WordPress login. Each connection represents a single WordPress account shared across all projects linked to it.
Manage your connection
Connections are managed from Connectors: select , then open the connection.- Unlink projects to remove access from specific projects while keeping the connection available for others. See Unlink projects from a connection for the steps.
- Delete the connection to remove it from the workspace entirely. Deleting is permanent. It removes the credentials from all linked projects, and app features that use stop working until a new connection is added. See Delete a connection for the steps and who can delete.