---
title: "Return single-use WordPress login URL"
method: GET
path: "/WPX/get_credentials"
tags: ["WPX"]
---

# Return single-use WordPress login URL

`GET /WPX/get_credentials`

## Request

- Base URL: `https://cpanel-server.tld:2083/execute`
- URL: `https://cpanel-server.tld:2083/execute/WPX/get_credentials`
- Auth: HTTP basic

This function returns a single-use login URL for a WordPress installation
that the caller owns. The URL carries a one-time token, so the caller does
not need the WordPress administrator password.

  **Note:**

  - Each call mints a new token, so the function is not idempotent and two
    calls return two different URLs. A token is consumed the first time it
    is used.
  - The `login` and `password` fields are always empty. They exist so the
    response shape stays stable for callers that expect a credential pair.
    This function never returns a WordPress password.
  - The system verifies that the caller owns the installation before it
    mints a token.

## Query parameters

- `id` integer, required
- `panel_return_url` string, uri

## Response `200`

The HTTP request was successful.

- object
  - `apiversion` integer: The version of the API.
  - `func` string: The name of the method called.
  - `module` string: The name of the module called.
  - `result` object
    - `data` object: The single-use login URL, with two always-empty credential fields.
      - `login` string: Always an empty string. The login is token-based, so no user name is returned.
      - `login_url` string: The single-use WordPress login URL. This is an empty string when the backend returned no link.
      - `password` string: Always an empty string. This function never returns a WordPress password.
    - `errors` string[], nullable: List of errors if the API failed.
    - `messages` string[], nullable: List of messages generated by the API.
    - `metadata` object
      - `transformed` 1: Post-processing may have transformed the data.
    - `status` 1 | 0: - `1` - Success. - `0` - Failed: Check the errors field for more details.
    - `warnings` string[], nullable: List of warnings generated by the API. Warnings describe non-critical failures or other problematic conditions noted while running an API.

## Changes

- **2026-09-23** `aed66b1a51cc`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/cpanel/apis/cpanel-uapi/changes/WPX/get_credentials/get.md)

---

[API](https://skmtc.dev/cpanel/apis/cpanel-uapi.md) - [All operations](https://skmtc.dev/cpanel/apis/cpanel-uapi/llms.txt) - [OpenAPI document](https://skmtc.dev/cpanel/apis/cpanel-uapi/revisions/05239220da37?raw)