Blockrush API Request Diagnostics gives administrators and WooCommerce store managers a fast, private
view of outbound requests made through the WordPress HTTP API.
Blockrush API Request Diagnostics observes requests made through WordPress HTTP API functions such as
wp_remote_get() and wp_remote_post(). This includes WordPress core and most
well-behaved plugins, including WooCommerce extensions.
Calls made directly through raw cURL, sockets, or third-party SDK transports that
bypass the WordPress HTTP API cannot be observed from a WordPress plugin without
unsafe system-level interception.
Recognized API keys, tokens, passwords, authorization headers, client secrets,
consumer credentials, signatures, and URL credentials are fully suppressed
before a log is inserted. Blockrush API Request Diagnostics does not
retain an unmasked copy.
Request bodies are captured by default with a 64 KB maximum. Authorized users
can adjust that limit in Settings. Response bodies are disabled by default.
Headers, status, duration, and byte size remain available when response bodies
are disabled.
Only administrators and WooCommerce users with manage_woocommerce can access
the dashboard, settings, and call details. All actions use WordPress nonces.
Filtered CSV and JSON exports are available through API Analyzer Pro.
Blockrush API Request Diagnostics stores logs only in the site’s own WordPress database. The plugin
does not send logs, telemetry, or personal information to Blockrush or any
other external service.
Because request bodies can contain customer or visitor information chosen by
other plugins, site owners should review their privacy obligations and retention
settings before enabling capture on a production site. Blockrush API Request Diagnostics provides
suggested text in WordPress’s Privacy Policy Guide.
Blockrush API Request Diagnostics does not contact an external service on its own. It does not send
data to Blockrush, load remote assets, collect telemetry, or operate a
hosted component.
The plugin observes outbound WordPress HTTP API calls initiated by WordPress
core, themes, and other plugins. The destinations and information sent in those
calls are controlled by the software that initiated them, not by Blockrush API Request Diagnostics.
Site owners should review the terms and privacy policies of those services
separately.