Skip to main content
veloom · case study
Freemium PluginWordPressAug 2026 — ongoing

veloom.

veloom wordpress everywhere

veloom turns WordPress into an API-first content layer. Write it once — then veloom it to every app, storefront, and screen that needs it, through one typed, developer-ready endpoint. One plugin, one authenticated endpoint, and your frontend has everything it needs: structured blocks, SEO metadata, navigation menus, real-time previews, a fully-typed SDK, and an AI-native content layer.

Timeline
Aug 2026 – Now
Model
Freemium
Role
Founder & Product Engineer
Status
Development
[The Challenge]

WordPress powers 40% of the web. Its REST API was designed for the Classic Editor era.

Every serious headless WordPress project assembles a fragile stack of one-off REST extensions, custom transformers, and brittle polling scripts. veloom replaces all of that.
40%
Raw HTML blobs

The default REST API returns raw post_content blobs — not component-ready JSON. Frontend teams have to parse, transform, and stitch results themselves.

N+1
Round-trips

Rendering a single page requires multiple API calls to get blocks, SEO metadata, menus, custom fields, and media. veloom collapses all of that into one.

Zero
Type safety

The default WP REST API ships no TypeScript types, no OpenAPI spec, and no SDK. Frontend teams build brittle integrations from scratch every time.

40%
of the web runs WordPress
[The Solution]

One plugin. Every layer of the headless contract. Built to scale.

Why I built this

WordPress powers 40% of the web, yet its REST API was designed for a simpler era. Every serious headless project reinvents the wheel: custom transformers, brittle polling scripts, N+1 queries. veloom eliminates that. Single endpoint, typed outputs, zero handoffs.

Component-ready Gutenberg engine

Every block becomes a typed { type, component, attrs, children } JSON node — ready to switch on in your renderer. Native transformers for all core blocks, custom mapping registry via filter, dynamic block support.

Full SDK ecosystem

Generated TypeScript client, Zod schemas, React hooks, Next.js integration, Nuxt 3 module, and Astro Content Collections loader — all served on-demand from the live OpenAPI spec at /sdk/*.

Real-time SSE previews

Frontend preview environments receive instant notifications when a WordPress author saves a draft. Redis Pub/Sub backend for sub-100 ms delivery. No WebSocket server needed — works with the native EventSource API.

Enterprise access control

Scoped tokens (read:posts, read:drafts, export:sdk), JWT auth, per-route permission policies via filter, IPv4/IPv6 CIDR allowlists, and a tamper-evident audit log with HMAC integrity per row.

Built at scale

150+ PHP source files · 60+ PHPUnit schema tests · 40+ Gutenberg block types · Zero infrastructure required.

[Architecture]

Built for the modern stack — zero infrastructure required.

veloom runs on any shared PHP host. There is no separate server, no Docker container, no queue worker to maintain. Redis, Memcached, and CDN integrations are opt-in Premium upgrades — the core product works out of the box. Every concern — SEO, custom fields, multilingual, semantic search, CDN purge, deployment — is a swappable provider you extend via WordPress filters without forking the plugin.

RuntimePHP 8.2+
WordPress6.8+
SchemaOpenAPI 3.1 (live)
Test suite60+ PHPUnit tests
AuthBearer tokens · JWT HS256
CachingTransient · Redis · Memcached
CDN purgeCloudflare · Fastly · Bunny · Vercel
CLIwp veloom (full suite)
[Feature Set]

Everything headless WordPress needs — in one plugin.

Block Transformer

Raw Gutenberg HTML → typed component JSON. 40+ block types, custom block mappings via filter.

SDK Ecosystem

TypeScript, Zod, React hooks, Next.js, Nuxt 3, Astro — all generated on-demand from the live OpenAPI spec.

Real-Time SSE

Draft-save notifications via Server-Sent Events. Redis Pub/Sub backend for sub-100 ms delivery. Last-Event-ID replay on reconnect.

Enterprise Caching

Redis & Memcached adapters, O(1) atomic tag eviction, CDN purge for Cloudflare, Fastly, Bunny.net, and Vercel.

Access Control

Scoped tokens, JWT auth, per-route policies, IPv4/IPv6 CIDR allowlists, tamper-evident audit log with HMAC integrity.

AI-Native API

LLM context export, semantic search via SQLite-vec cosine similarity, embedding manager. Swap in Pinecone, Weaviate, or pgvector via filter.

Observability

Prometheus metrics at /metrics, OpenTelemetry-compatible tracing spans, Cloudflare Workers and Fastly Compute edge worker patterns.

Editorial Workflow

API-driven status transitions, edit locks, multi-step approval chains, internal comment threads, scheduled content with ISR revalidation hints.

Content Contracts

Inferred TypeScript contracts for every post type, breaking-change diff between versions, CI-ready validation endpoint at /contracts/validate.

Zero Lock-In

Swappable providers for every concern. GPL Free edition, no infrastructure required for core features. Works on any shared PHP host.

The next one starts here.

Got an idea? Let's collaborate on your next project.

Start a project