aid: fusewp
name: FuseWP
description: 'FuseWP is a WordPress automation plugin from the FuseWP Team (ProperFraction)
  that synchronizes WordPress users, customers, members and form leads with more than
  thirty email marketing platforms and CRMs — including Mailchimp, ActiveCampaign,
  Constant Contact, HubSpot, Klaviyo, Brevo, MailerLite, Salesforce, Zoho CRM, Keap,
  AWeber, GoHighLevel, SendPulse and Google Sheets. It maps WordPress user roles,
  WooCommerce/EDD orders, LMS enrollments (LearnDash, LifterLMS, Tutor LMS, Sensei),
  membership plugins (MemberPress, Paid Memberships Pro, Restrict Content Pro) and
  form submissions (Contact Form 7, Gravity Forms, WPForms, Fluent Forms) to lists,
  tags and custom fields in the connected platform. FuseWP is primarily an API
  CONSUMER rather than an API producer: the plugin runs self-hosted inside the
  customer''s WordPress installation and registers no REST routes of its own. Its
  one first-party HTTP surface is a hosted OAuth broker at auth.fusewp.com that
  holds FuseWP''s OAuth client credentials and brokers the authorization-code and
  refresh-token exchange for the eleven partner platforms that require OAuth.'
image: https://fusewp.com/wp-content/uploads/2023/06/fusewp-wordpress-plugin.png
url: https://raw.githubusercontent.com/api-evangelist/fusewp/refs/heads/main/apis.yml
x-type: company
x-source: harvest:marketing-integration-graph
specificationVersion: '0.23'
created: '2026-08-12'
modified: '2026-08-12'
tags:
- Company
- WordPress
- Email Marketing
- Marketing Automation
- CRM
- Integration
- Data Synchronization
- OAuth
- Plugins
- No Code
apis:
- aid: fusewp:oauth-broker
  name: FuseWP OAuth Broker
  description: 'The hosted OAuth authorization broker FuseWP operates at
    auth.fusewp.com. The self-hosted FuseWP plugin cannot safely hold OAuth client
    secrets for the partner platforms it connects to, so it delegates the
    authorization-code and refresh-token exchange to this service. GET
    /{integration_id} (with fwpnonce and redirect_url query parameters) issues a
    302 to the partner platform''s own authorize endpoint carrying FuseWP''s
    registered client_id, the auth.fusewp.com redirect_uri and the delegated scope
    set; GET /{integration_id}?refresh_token={token} returns a JSON body with a
    boolean `success` field plus refreshed credentials. Eleven integration ids
    resolve to a live 302 as probed on 2026-08-12: aweber, birdsend,
    campaignmonitor, constantcontact, copper, gohl (GoHighLevel), hubspot, keap,
    mailchimp, zohocrm and zohocampaigns. The service publishes no OpenAPI, no
    developer documentation and no /.well-known/ discovery surface; the contract
    recorded here was derived from the GPL-licensed first-party plugin source
    (src/core/src/Integrations/AbstractIntegration.php) and confirmed by live
    probe.'
  humanURL: https://fusewp.com/docs/
  baseURL: https://auth.fusewp.com
  tags:
  - OAuth
  - Authorization
  - Integration
  properties:
  - type: Authentication
    url: authentication/fusewp-authentication.yml
  - type: OAuthScopes
    url: scopes/fusewp-scopes.yml
  - type: Conventions
    url: conventions/fusewp-conventions.yml
  - type: RateLimits
    url: rate-limits/fusewp-rate-limits.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/fusewp-domain-security.yml
- type: Website
  url: https://fusewp.com/
- type: DeveloperPortal
  url: https://fusewp.com/docs/
- type: Documentation
  url: https://fusewp.com/docs/
- type: GettingStarted
  url: https://fusewp.com/article/installation-activation/
- type: Support
  url: https://fusewp.com/support/
- type: Blog
  url: https://fusewp.com/blog/
- type: GitHubOrganization
  url: https://github.com/fusewp
- type: Pricing
  url: https://fusewp.com/pricing/
- type: SignUp
  url: https://fusewp.com/pricing/
- type: Login
  url: https://fusewp.com/account/
- type: TermsOfService
  url: https://fusewp.com/terms-conditions/
- type: PrivacyPolicy
  url: https://fusewp.com/privacy-policy/
- type: ChangeLog
  url: https://fusewp.com/changelog/
- type: Packages
  url: packages/fusewp-packages.yml
- type: Plans
  url: plans/fusewp-plans-pricing.yml
- type: RateLimits
  url: rate-limits/fusewp-rate-limits.yml
- type: Authentication
  url: authentication/fusewp-authentication.yml
- type: OAuthScopes
  url: scopes/fusewp-scopes.yml
- type: Conventions
  url: conventions/fusewp-conventions.yml
- type: Conformance
  url: conformance/fusewp-conformance.yml
- type: Lifecycle
  url: lifecycle/fusewp-lifecycle.yml
- type: ChangeLog
  url: changelog/fusewp-changelog.yml
- type: LLMsTxt
  url: llms/fusewp-llms.txt
- type: WellKnown
  url: well-known/fusewp-well-known.yml
- type: MCPServer
  url: mcp/fusewp-mcp.yml
x-vouched-by:
- MailerLite
- SendPulse
x-vouch-count: 2
x-enrichment:
  date: '2026-08-12'
  status: enriched
  artifacts_added: 15
  pass: local-v1
  note: >-
    FuseWP publishes no OpenAPI and its plugin registers zero REST routes, but
    STEP 0b contract discovery found two genuine first-party HTTP surfaces the
    provider never documents anywhere — an undocumented OAuth broker at
    auth.fusewp.com (eleven live integration paths, with the delegated scope set
    readable straight off each 302 Location header) and an OAuth-gated MCP
    endpoint on fusewp.com advertised through RFC 8414 and RFC 9728 well-known
    metadata. Declaring "no spec" after only checking fusewp.com/openapi.json
    would have missed both.
  evidence:
  - url: https://auth.fusewp.com/mailchimp
    status: 302
  - url: https://fusewp.com/.well-known/oauth-authorization-server/
    status: 200
  - url: https://fusewp.com/wp-json/mcp/mcp-oauth-server
    status: 401
  - url: https://fusewp.com/openapi.json
    status: 404