API
Beauty Booking Pro exposes WordPress REST routes under:
/wp-json/xcodesol-beauty/v1Public routes
Public routes support the booking form, availability lookup, and customer-facing actions. Typical public resources include locations, service categories, services, extras, staff, availability, booking forms, booking creation, waitlist creation, and reviews.
Public data routes still require an active license. Booking creation performs a final server-side availability check before the appointment is stored.
Admin routes
Admin routes require WordPress authentication, capability checks, nonces where applicable, and an active license. Admin resources include settings, customers, bookings, calendar views, payments, commerce records, marketing records, analytics, reports, vendors, marketplace records, system tools, demo import, webhooks, API tokens, and license actions.
License routes
License routes remain available while the plugin is locked so administrators can activate or repair the installation:
GET /license/statusPOST /license/activatePOST /license/validatePOST /license/deactivate
Webhooks
Webhook records can be used to notify external systems about booking, payment, customer, vendor, or operational events. Sign outbound webhooks and keep retry behavior visible in background job logs.
API tokens
Use API tokens for server-to-server integrations only. Rotate tokens when staff leave, integrations are retired, or a token may have been exposed.