mxHeadless
REST API gateway for headless frontends on MODX 3. Resources, objects, OpenAPI, API keys, and OAuth

Query parameter ?preview=true on resource or page GET includes unpublished content.
| Identity | Condition |
|---|---|
| Anonymous | Denied |
| Session | MODX permission view_unpublished |
| API key / OAuth | Scope preview and the key user's ACL |
curl -s 'https://example.com/api/v1/resources/12?preview=true' \
-H 'Authorization: Bearer mxh_...'Context and field policy still apply. Hidden fields are not returned.
Preview responses use Cache-Control: private, no-store. Do not cache on a CDN. See HTTP caching.