Detailed Feature Reference
Features documented tier by tier.
Free Edition — Core Capabilities
- Provider capacity3 API providers + 2 RSS providers simultaneously active
- Manual fetchTrigger a fetch on demand from the admin dashboard; Free has a 2-hour manual-fetch cooldown and no cron schedule
- Response formatsJSON, XML, RSS/Atom, CSV, HTML, and plain text parsed natively, including Google Sheets CSV URLs
- AuthenticationNo auth, API Key (query or header), Bearer token, HTTP Basic
- HTTP methodsGET, POST, PUT, PATCH, DELETE
- Transient cachingConfigurable TTL to avoid redundant API calls
- Post publishingCreates WordPress posts from fetched items in Publish, Draft, or Pending mode
- Duplicate detectionSkips items already published (by title and/or URL)
- Featured image sideloadingDownloads and attaches images from the feed to the WordPress media library
- Source attribution blockAppends a customisable attribution footer to each imported post
- Taxonomy mappingAssigns categories and tags to imported posts via configurable slugs
- Post meta taggingStamps each post with source URL, fetch type, provider name, fetch timestamp, and source date
- Planned/last call previewView the planned request (URL, headers, params) and the last actual call details without running a live fetch
- Setup WizardGuided step-by-step provider configuration flow for first-time setup
- JSON Path Selector (basic)Point-and-click selector to map API response fields to post fields
- Basic retryAutomatic single retry on transient network failures
- Activity LogTimestamped log of all fetch and publish events with status and detail messages
- Log clearingClear the activity log from the admin panel
- RSS supportIngest RSS/Atom feeds via WordPress SimplePie integration
- Plugin Info tabSystem information, PHP/WP version, active providers summary
Lite Edition — Automation & Scheduling
Includes everything in Free, plus the following additions:
- Provider capacity10 API providers + 10 RSS providers
- Scheduled fetchingAutomatic cron-based fetching at 1-hour, 2-hour, 4-hour, 6-hour, or 24-hour intervals on Lite; Pro adds 12-hour and custom hour-based intervals
- Provider rotationCycles through active providers in sequence per cron run so no single provider dominates
- Provider toggleEnable or disable individual providers without deleting them
- Custom post type per providerEach provider can publish to a different registered post type
- Provider health monitoringDashboard table showing each provider’s last fetch status, latency, success/failure counts
- Live preview testRuns a real live fetch in-browser and displays the raw response and parsed items immediately
- Provider presetsOne-click templates for common source types: YouTube API, Generic API-Key, Generic Bearer (API presets); Google News RSS, YouTube Video RSS, Podcast RSS (RSS presets)
- Page-based paginationAutomatically iterates through paginated API responses (page=1, page=2, …) per fetch run
- OAuth2 Client CredentialsFull OAuth2 client_credentials grant flow with automatic token management and expiry refresh
- RSS full-text extractionFetches the full article text from the source URL to supplement truncated RSS excerpts; configurable max characters (500–120,000); append or replace-excerpt mode; if fallback full-text extraction is used for an item, that item is forced to draft for manual review
- RSS auto-discoveryProvide a website URL and Ingestics automatically discovers the RSS/Atom feed endpoint
- Rate-limit (HTTP 429) handlingDetects 429 responses and pauses or retries gracefully
- Shortcodes
[auto_api_feed]and[aapi_feed]for embedding feeds in any post, page, or widget area - Template tags
aapi_get_feed()andaapi_render_feed()for theme-level integration (Lite+) - Gutenberg block
ingestics/feedblock with full attribute panel in the block editor - Grid layoutCard-based responsive grid display for front-end feeds
- Classic WidgetWordPress widget for use in traditional sidebar widget areas
Pro Edition — Advanced Intelligence
Includes everything in Lite, plus the following additions:
- Provider capacity25 API providers + 25 RSS providers
- Extended schedule frequenciesAdds 12-hour scheduling and fully custom cron frequency in hours (minimum 0.25 h = 15 minutes, maximum 168 h = 1 week)
- Visual Query BuilderGUI for building complex query parameters: filter by country, category, language, domain without editing URLs manually
- Cursor / next-token paginationHandles cursor-based and next_token-style pagination used by Reddit-style, government, and modern REST services
- OAuth2 Auth Code + refreshAuthorization Code grant flow with automatic token refresh, including PKCE (S256) support for compatible providers — for APIs that require user-delegated access
- Exponential backoff retrySmart retry strategy that increases wait time between attempts to respect server throttle limits
- Advanced JSON Path SelectorDeep nested path selection, array traversal, and expression filtering for complex API responses
- Content filter engine (6 rules)Automatic content quality checks — each rule configurable to reject, draft, or publish: no_title, no_content, no_source_url, invalid_url, duplicate_title, duplicate_url
- Event triggers / inbound webhookREST endpoint
POST /wp-json/ingestics/v1/triggerauthenticated with a shared secret header; POST is the default and recommended method, while legacy GET and query-secret compatibility are optional toggles disabled by default; trigger any fetch or publish operation from an external service - WordPress action hooksTrigger operations internally with
aapi_trigger_fetch,aapi_trigger_fetch_api,aapi_trigger_fetch_rss, andaapi_trigger_publish(Pro+) - Provider campaignsGroup providers into named campaigns and trigger an entire campaign via a single webhook call
- Affiliate URL rewritingAutomatically appends affiliate parameters or replaces domains in outbound links within fetched content
- Fallback imagesConfigure a fallback image URL or media library item to use when a fetched item has no image
- WebP conversionAutomatically converts sideloaded images to WebP format during import for improved page performance
- Failure digestsScheduled email and/or Slack notification summarising provider failures, skipped items, and error patterns
- Benchmark panelDashboard panel displaying per-provider fetch timing, item count, and performance trends over time
- Elementor widgetNative Elementor widget (
AAPI_Elementor_Feed_Widget) with full design controls inside the Elementor editor - Bricks elementNative Bricks Builder element (
AAPI_Bricks_Feed_Element) with full visual controls - Carousel layoutAuto-advancing carousel display for front-end feeds with configurable autoplay interval
Business Edition — Enterprise Scale
Includes everything in Pro, plus the following additions:
- Provider capacityUnlimited API providers + unlimited RSS providers
- Separate API & RSS schedulesIndependent cron hooks (
aapi_api_cron_fetch/aapi_rss_cron_fetch) so API and RSS pipelines run on completely different intervals - Separate rotation queuesAPI rotation and RSS rotation maintain independent sequence state
- Business output modesUse per-provider publish mode controls and output modes such as full_content, excerpt, title_only, or raw_payload where available
- Auto format detectionAdvanced response mode that auto-detects JSON/XML/RSS/CSV/HTML/Text without explicit configuration
- Full filter engine (14 rules)Adds 8 more rules to the 6 Pro rules: short_title, short_content, long_content, no_image, broken_image, blocked_keywords, no_date, no_description — each with configurable thresholds and action
- Blocked keywords filterDefine a list of keywords; any item containing them in title or content is automatically rejected or drafted
- Twig template engineUse Twig templating syntax in front-end display templates for full control over HTML output
- AI rewritePre-publish pipeline rewrites fetched content using: OpenAI GPT models, Anthropic Claude, Google Gemini, or a Custom HTTP endpoint. Configurable max chars for title (40–1000), excerpt (80–8000), and content (1000–120,000). Strict mode skips or force-drafts items that fail rewrite guardrails
- TranslationPre-publish translation via: OpenAI, Anthropic, Gemini, DeepL, Google Translate, LibreTranslate, or a Custom endpoint. Runs after AI rewrite in the pipeline
- Stock image auto-attach (Pexels)When a fetched item has no image and no fallback matches, automatically queries Pexels for a relevant stock photo, downloads it, and attaches it as the featured image
- Rate-limit budget queueHTTP 429 responses enqueue items into a persistent DB queue; a separate cron (
aapi_rate_limit_budget_queue) drains the queue within the API’s rate-limit budget window - Ticker layoutHorizontally scrolling news ticker display for front-end feeds with configurable speed, direction, and pause-on-hover
- AWS SigV4 authenticationNative AWS Signature Version 4 signing for AWS-hosted APIs (API Gateway, Bedrock, etc.) without any external SDK
- Enterprise connector controlsFine-grained connector-level enable/disable, audit-oriented operational controls, quota/budget controls, and automatic deferral to the next allowed budget window where configured
- Audit log exportExport the full activity log to JSON, CSV, or NDJSON for compliance, reporting, or archiving
- Activity-log reconciliationRun summaries include fetched, created, published, draft, pending, filtered, duplicates, errors, and unaccounted counts for transparent accounting
- External webhook bridgeFires outbound webhook events for fetch-run completion and post-publish activity to a configured Zapier, Make (Integromat), or any custom URL — only when explicitly enabled and configured by an administrator
- Per-item content operation overridesUse the
_aapi_content_opsfield in provider configuration to override AI/translation settings on a per-item basis via item-level field values
Authentication Methods — Full Reference
- NoneOpen/public APIs — Free+
- API Key (header)Sends key as a custom request header — Free+
- API Key (query param)Appends key to the URL query string — Free+
- Bearer TokenStandard
Authorization: Bearer <token>header — Free+ - HTTP BasicBase64-encoded username:password — Free+
- OAuth2 Client CredentialsMachine-to-machine token grant; auto-refreshes on expiry — Lite+
- OAuth2 Auth Code + RefreshUser-delegated access with refresh token management, including PKCE (S256) support for compatible providers — Pro+
- AWS SigV4AWS Signature V4 signing for AWS API Gateway and AWS services — Business
Supported Response Formats
- JSONFull support including nested objects and arrays — Free+
- XMLParsed to associative array; XPath-style field mapping — Free+
- RSS / AtomVia WordPress SimplePie — Free+
- CSVRows mapped to post fields via column index or header name, including Google Sheets URLs auto-normalized to CSV export endpoints — Free+
- HTMLStructured extraction via selector mapping (items/title/content/url/image/date/source), with single-item fallback mode when selectors are not configured — Free+
- Plain TextRaw text body stored as post content — Free+
- Auto-detectInspects Content-Type header and response body to determine format automatically — Business
Security & Secret Management
- AES encryption at restAll secrets stored with
aapi_sec_v1:prefix using AES cipher + HMAC MAC - Random IV per secret
random_bytes(16)generates a unique IV for each encryption operation - Auto-migrationPlaintext legacy values are silently migrated to encrypted form on first read
- Request snapshot maskingAuth headers, API keys, and secrets are replaced with
****in all stored snapshots - Remote URL hardeningRemote endpoints are normalized and validated; private/reserved IP ranges and link-local targets are blocked by default
- Admin AJAX protectionsNonce verification and capability checks are enforced on admin-side AJAX operations
- Encrypted secretsLicense key, webhook secret, bridge secret, transform auth, stock image key, OpenAI key, Anthropic key, Gemini key, DeepL key, Google Translate key, LibreTranslate key
- HTTPS enforcementLicense verification endpoint must use HTTPS; relaxable only via code-level filter
- Advanced compatibility togglesOptional controls for HEAD/OPTIONS methods, legacy API-key fallback, and OAuth token request compatibility fallback (enable only when needed)
- Multisite-aware lifecycleSupports network activation/deactivation and initializes plugin defaults for newly created sites when network-activated
- Webhook secure defaultsInbound trigger accepts POST by default; legacy GET method and query-string secret fallback are available only as explicit compatibility toggles
- Webhook rate limitingIP-based rate limiting on the inbound webhook trigger endpoint