PRO
WordPress Mode ​
WordPress Mode is a Pro panel for headless-first deployments. It combines lockdown controls and recovery tooling in one place.
Main Controls ​
Applications Only ​
When enabled, WordPress behaves as application-first:
- unmatched core REST traffic is redirected according to your configured destination,
- plugin routes can still be managed through route policy,
- the setup is optimized for sites where WordPress is not the public front-end.
Trusted IPs ​
Define known-safe IPs or CIDR ranges for operational access.
Use cases:
- secure admin maintenance access,
- controlled bypass during incident response,
- stable access for trusted infrastructure.
Emergency Reset Token ​
Generate a one-time recovery token before enabling strict lockdown. If you lock yourself out, the token provides a controlled reset path.
Best practice:
- generate and store the token securely,
- verify it once in staging,
- rotate after use.
Safe Rollout Order ​
- Configure redirect destination in Theme.
- Add trusted IPs for maintainers.
- Generate emergency reset token and store it.
- Enable applications only mode.
- Validate public, app, and admin flows.