openapi: 3.2.0 info: title: Matchpoint Therapeutics Content Search API version: wp/v2 summary: Anonymously readable WordPress REST content API behind matchpointtx.com. description: The read-only content surface Matchpoint Therapeutics exposes at https://matchpointtx.com/wp-json. Matchpoint Therapeutics is a Cambridge, Massachusetts biotechnology company founded in 2021 and launched publicly in October 2022 with $100 million in financing, discovering precision small-molecule covalent medicines for immune diseases and cancer on its Advanced Covalent Exploration (ACE) platform. It runs no developer program and markets no product API. This document is an API Evangelist derivation of the WordPress `wp/v2` and `oembed/1.0` route index the site publishes at /wp-json/, restricted to the operations that were verified to return data anonymously on 2026-08-25. contact: name: Matchpoint Therapeutics url: https://matchpointtx.com/ x-api-evangelist-provenance: 'Derived by the API Evangelist enrichment pipeline from the live WordPress REST route index at https://matchpointtx.com/wp-json/ (222 routes across 13 namespaces) and verified against live anonymous responses on 2026-08-25. Every parameter below appears verbatim in the route index `args` for that endpoint, and every collection count in a description was read from the `X-WP-Total` response header on that date. Matchpoint Therapeutics publishes no OpenAPI, no developer documentation and no API reference for this surface; the humanURL in apis.yml points at the upstream WordPress REST handbook that defines the wp/v2 contract. The deployment is served by WP Engine behind Cloudflare (x-powered-by: WP Engine, cf-ray on every response) and API responses carry `x-robots-tag: noindex`. Write operations and the credentialed surface — POST/PUT/PATCH/DELETE everywhere, /wp/v2/users, /wp/v2/settings, /wp/v2/menus, /wp/v2/menu-items, /wp/v2/templates, /wp/v2/template-parts, the yoast/v1, struck/v1, wordfence/v1, wpe/cache-plugin/v1, wpe_sign_on_plugin/v1, wp-site-health/v1, wp-block-editor/v1 and wp-abilities/v1 namespaces, and /oembed/1.0/proxy (observed 401) — are deliberately excluded. Nothing here was obtained with credentials.' servers: - url: https://matchpointtx.com/wp-json description: Production content API tags: - name: search description: Cross-content search across published objects. paths: /wp/v2/search: get: tags: - search operationId: searchContent summary: Search published content description: Cross-content search across published objects — posts, pages and the team custom post type. An unfiltered query returned 27 matches at harvest time. Each result is a lightweight pointer (id, title, url, type, subtype) that resolves against the posts, pages or team collections. parameters: - $ref: '#/components/parameters/Context' - $ref: '#/components/parameters/Page' - $ref: '#/components/parameters/PerPage' - $ref: '#/components/parameters/Fields' - name: search in: query required: true description: Limit results to those matching a string. schema: type: string examples: - covalent - $ref: '#/components/parameters/Exclude' - $ref: '#/components/parameters/Include' - name: type in: query description: Limit results to items of an object type. schema: type: string enum: - post - term - post-format default: post - name: subtype in: query description: Limit results to items of one or more object subtypes — post, page or team on this deployment. schema: type: array items: type: string default: - any responses: '200': description: A page of results headers: X-WP-Total: schema: type: integer examples: - 27 description: Total number of matching items. X-WP-TotalPages: schema: type: integer description: Total number of pages available. Link: schema: type: string description: RFC 8288 pagination links (rel="next" / rel="prev"). content: application/json: schema: type: array items: $ref: '#/components/schemas/SearchResult' '400': $ref: '#/components/responses/BadRequest' components: parameters: Fields: name: _fields in: query description: Comma-separated allow-list of top-level response fields (WordPress REST global parameter). schema: type: string PerPage: name: per_page in: query description: Maximum number of items to be returned in the result set. schema: type: integer minimum: 1 maximum: 100 default: 10 Page: name: page in: query description: Current page of the collection. schema: type: integer minimum: 1 default: 1 Exclude: name: exclude in: query description: Ensure result set excludes specific IDs. schema: type: array items: type: integer Include: name: include in: query description: Limit result set to specific IDs. schema: type: array items: type: integer Context: name: context in: query description: Scope under which the request is made; determines fields present in the response. Anonymously only `view` and `embed` return data; `edit` returns 401. schema: type: string enum: - view - embed - edit default: view schemas: Error: type: object description: The WordPress REST error envelope. Not RFC 9457 problem+json. required: - code - message - data properties: code: type: string description: Machine-readable error code. examples: - rest_post_invalid_id message: type: string description: Human-readable error message. examples: - Invalid post ID. data: type: object properties: status: type: integer description: The HTTP status code. examples: - 404 params: type: object description: Per-parameter messages, present on rest_invalid_param. additionalProperties: type: string details: type: object description: Per-parameter structured detail, present on rest_invalid_param. additionalProperties: type: object SearchResult: type: object description: A lightweight cross-content search hit. properties: id: type: integer title: type: string url: type: string format: uri type: type: string examples: - post subtype: type: string examples: - team _links: type: object responses: BadRequest: description: Invalid parameter (rest_invalid_param / rest_missing_callback_param) content: application/json: schema: $ref: '#/components/schemas/Error'