openapi: 3.1.0
info:
  title: Cresilon oEmbed API
  version: wp/v2
  summary: oEmbed 1.0 provider endpoint for cresilon.com URLs.
  description: Cresilon publishes its corporate website (cresilon.com) on WordPress (WordPress.com Atomic
    hosting, nginx) with the core WordPress REST API enabled and anonymously readable. This specification
    was DERIVED by discovering the live route index at https://cresilon.com/wp-json/ and probing each
    route for anonymous access; only routes verified to return HTTP 200 without credentials are documented
    here as public operations. Write operations exist on the same routes but require authentication (WordPress
    cookie + X-WP-Nonce, or Application Passwords) and are not documented here; anonymous requests to
    them return HTTP 401. This is NOT a product API offered by Cresilon to customers — Cresilon is a biotechnology
    and medical-device manufacturer, not a software vendor. This is the content API of their marketing
    site, captured for discovery purposes. This document covers the oEmbed discovery route WordPress registers,
    which returns embeddable rich metadata (title, author, thumbnail, iframe HTML) for any cresilon.com
    news post or page. Note the sibling `/oembed/1.0/proxy` route exists but is NOT anonymously readable
    — it returns HTTP 401 — and is therefore not documented here.
  contact:
    name: Cresilon
    url: https://cresilon.com/contact-us/
    email: info@cresilon.com
  license:
    name: Site content — all rights reserved, see Terms of Use
    url: https://cresilon.com/terms-of-use/
  x-apis-io-provenance:
    method: derived
    source: https://cresilon.com/wp-json/
    derived_on: '2026-08-04'
    note: Routes enumerated from the live wp-json discovery document (1,021 routes across 45 namespaces);
      every operation below was probed anonymously and returned HTTP 200. Schemas reflect the field set
      observed in live responses on 2026-08-04, including the `acf` (Advanced Custom Fields), Jetpack
      and `yoast_head_json` extensions this site adds. No fabricated operations or parameters.
servers:
- url: https://cresilon.com/wp-json
  description: Production
tags:
- name: oEmbed
  description: oEmbed 1.0 rich metadata for Cresilon URLs.
paths:
  /oembed/1.0/embed:
    get:
      tags:
      - oEmbed
      operationId: getOEmbed
      summary: Get oEmbed data for a Cresilon URL
      description: oEmbed 1.0 provider endpoint for cresilon.com URLs. Returns embeddable rich metadata
        for news posts and site pages. Verified live 2026-08-04 in both JSON and XML.
      parameters:
      - name: url
        in: query
        required: true
        description: The cresilon.com URL to retrieve embed information for.
        schema:
          type: string
          format: uri
      - name: format
        in: query
        description: Response format.
        schema:
          type: string
          enum:
          - json
          - xml
          default: json
      - name: maxwidth
        in: query
        description: Maximum width of the embed frame in pixels.
        schema:
          type: integer
          default: 600
      - name: maxheight
        in: query
        description: Maximum height of the embed frame in pixels.
        schema:
          type: integer
      responses:
        '200':
          description: oEmbed data for the requested URL.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OEmbedResponse'
              examples:
                home:
                  summary: oEmbed for the Cresilon home page
                  externalValue: https://cresilon.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fcresilon.com%2F
            text/xml:
              schema:
                type: string
                description: oEmbed XML serialization.
        '404':
          $ref: '#/components/responses/NotFound'
components:
  parameters:
    id:
      name: id
      in: path
      required: true
      description: Unique numeric identifier for the object.
      schema:
        type: integer
    page:
      name: page
      in: query
      description: Current page of the collection. Defaults to 1.
      schema:
        type: integer
        minimum: 1
        default: 1
    perPage:
      name: per_page
      in: query
      description: 'Maximum number of items to be returned in the result set. Verified live: values outside
        1-100 return HTTP 400 `rest_invalid_param`.'
      schema:
        type: integer
        minimum: 1
        maximum: 100
        default: 10
    search:
      name: search
      in: query
      description: Limit results to those matching a string.
      schema:
        type: string
    order:
      name: order
      in: query
      description: Order sort attribute ascending or descending.
      schema:
        type: string
        enum:
        - asc
        - desc
        default: desc
    orderby:
      name: orderby
      in: query
      description: Sort collection by object attribute.
      schema:
        type: string
        enum:
        - author
        - date
        - id
        - include
        - modified
        - parent
        - relevance
        - slug
        - include_slugs
        - title
        default: date
    context:
      name: context
      in: query
      description: Scope under which the request is made; determines fields present in the response. Only
        `view` and `embed` are available anonymously — `edit` returns HTTP 401.
      schema:
        type: string
        enum:
        - view
        - embed
        default: view
    fields:
      name: _fields
      in: query
      description: Comma-separated list of fields to limit the response to. Verified live, e.g. `_fields=id,slug,link,title`.
      schema:
        type: string
    embed:
      name: _embed
      in: query
      description: Embed linked resources (author, featured media, terms) into the response.
      schema:
        type: boolean
    include:
      name: include
      in: query
      description: Limit result set to specific IDs.
      schema:
        type: array
        items:
          type: integer
    exclude:
      name: exclude
      in: query
      description: Ensure result set excludes specific IDs.
      schema:
        type: array
        items:
          type: integer
    offset:
      name: offset
      in: query
      description: Offset the result set by a specific number of items.
      schema:
        type: integer
    slugParam:
      name: slug
      in: query
      description: Limit results to items with one of the given slugs.
      schema:
        type: array
        items:
          type: string
  responses:
    NotFound:
      description: The requested object does not exist.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: rest_post_invalid_id
            message: Invalid post ID.
            data:
              status: 404
    InvalidParam:
      description: One or more query parameters failed validation.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: rest_invalid_param
            message: 'Invalid parameter(s): per_page'
            data:
              status: 400
              params:
                per_page: per_page must be between 1 (inclusive) and 100 (inclusive)
    Unauthorized:
      description: 'The route exists but requires authentication. Verified live: anonymous requests to
        privileged routes return this envelope with HTTP 401.'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: rest_forbidden
            message: Sorry, you are not allowed to do that.
            data:
              status: 401
  schemas:
    OEmbedResponse:
      type: object
      description: An oEmbed 1.0 `rich` response for a cresilon.com URL. Field set observed live on 2026-08-04.
      properties:
        version:
          type: string
          const: '1.0'
        provider_name:
          type: string
          example: Cresilon
        provider_url:
          type: string
          format: uri
          example: https://cresilon.com
        author_name:
          type: string
        author_url:
          type: string
          format: uri
        title:
          type: string
        type:
          type: string
          example: rich
        width:
          type: integer
        height:
          type:
          - integer
          - 'null'
        html:
          type: string
          description: Embeddable iframe markup for the WordPress post embed.
        thumbnail_url:
          type: string
          format: uri
        thumbnail_width:
          type: integer
        thumbnail_height:
          type: integer
      required:
      - version
      - provider_name
      - provider_url
      - type
    Error:
      type: object
      description: The WordPress REST error envelope, verified live against cresilon.com. Note this is
        NOT RFC 9457 application/problem+json — it is served as application/json with a WordPress-specific
        shape.
      properties:
        code:
          type: string
          description: Machine-readable WordPress error code, e.g. `rest_post_invalid_id`.
        message:
          type: string
          description: Human-readable message.
        data:
          type: object
          properties:
            status:
              type: integer
              description: HTTP status code, repeated in the body.
            params:
              type: object
              additionalProperties:
                type: string
            details:
              type: object
              additionalProperties: true
          required:
          - status
      required:
      - code
      - message
      - data