List components

View as MarkdownOpen in Claude

One row per plugin/theme/core installed anywhere the token can reach, with per-organization aggregates. Default sort: sites_updatable descending.

Authentication

AuthorizationBearer

Personal access token created in the Modular DS dashboard; read-only tokens can only call GET endpoints.

Query parameters

filter[type][]stringOptional

core | plugin | theme

filter[site][]stringOptional
Narrows the counted sites
filter[team][]stringOptional
filter[tags][]stringOptional
filter[core_version][]stringOptional

Exact WordPress versions of the website, for example 6.8.1; repeat the parameter for several, any of them matches

filter[engine_version][]stringOptional

Exact PHP versions of the website, for example 8.2.27; repeat the parameter for several, any of them matches

filter[update_available]stringOptional

1|0: true = at least one counted site has an update pending

filter[has_vulnerabilities]stringOptional

1|0: true = a known vulnerability affects an installed version

filter[is_abandoned]stringOptional

1|0: true = no release by its author in 2 years

filter[closed]stringOptional

1|0: true = closed on wordpress.org

filter[s]stringOptional
sortstringOptional

sites_updatable (default, desc) | name | vulnerabilities | released_at | sites_total, --prefixed for descending

page[number]stringOptional
page[size]stringOptional
Max 50, default 15
fields[components]stringOptional
Sparse fieldset. Base attributes: slug, name, type, url, is_abandoned, closed, latest_version, released_at, days_since_release, copilot_score, vulnerabilities, sites_total, sites_updatable, sites_active, in_progress_actions. `sites_updatable`: of those, how many have a newer version pending on a site that also accepts installs - the same rule as the site item's own `updatable` filter.

Response

200 - Components

datalist of objectsOptional
jsonapiobjectOptional
metaobjectOptional