MokonyxSocial publishes your Joomla content as posts on a WordPress site through the WordPress REST API, signing in with an application password. It works with self-hosted WordPress (and WordPress.com sites that have the REST API and application passwords enabled).
What you need
- A WordPress site (5.6+) with the REST API reachable at
/wp-json/. - A WordPress user who can publish posts (Author, Editor, or Administrator).
- That user's site URL, username, and an application password.
Get your credentials
Site URL site_url (required)
Your WordPress site's base URL — MokonyxSocial adds the REST route (/wp-json/wp/v2/posts) for you.
- Use your homepage URL, like
https://example.com(orhttps://example.com/blogif WordPress sits in a subfolder). - Include
https://and don't add a trailing/wp-json.
Username username (required)
The login username of the account that will author your posts.
- In WordPress admin, go to Users → All Users and open the publishing account.
- Use its Username (the login name, not the display name).
Application password app_password (required)
A dedicated REST-API credential, separate from the account's normal login password (added in WordPress 5.6).
- Log into WordPress admin as that user and open Users → Profile (or edit the account).
- Scroll to Application Passwords, enter a name like
MokonyxSocial, and click Add New Application Password. - WordPress shows the password just once (like
xxxx xxxx xxxx xxxx xxxx xxxx) — copy it right away. Spaces can stay or go.
> Don't see the Application Passwords section? It needs HTTPS, and some security plugins turn it off — enable it or use a plugin that restores it.
Set it up in MokonyxSocial
- In Joomla admin, go to Components → MokonyxSocial → Services → New.
- Choose WordPress.
- Enter the credentials above.
- Click Send Test to verify, then Save & Close and make sure it's Published.
Verify
Once Send Test succeeds, open your WordPress Posts list and confirm the test post is there. Then publish a Joomla article and check that it shows up.
Troubleshooting
- 401 / "application passwords not enabled": turn on HTTPS/application passwords, or a security plugin is blocking them — allowlist the REST route.
- 403 on
/wp-json: a plugin or server rule is blocking REST — allow REST API access. - "cannot create" error: the account can't publish — use an Author, Editor, or Administrator.
- 404 for the REST route: your
site_urlis wrong or permalinks are off — check the URL and set pretty permalinks.
Notes & limits
- Application passwords need WordPress 5.6+ and usually HTTPS.
- Each app password is tied to one user and can be revoked from that same profile screen without touching the login password.
- The user's role decides whether posts go live or save as drafts.