Turn Off REST APIv1.1.4
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Alternatives to 3task Doorman: REST API & MCP Access Control
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
Selective maintenance and service-status control for WordPress. Keep unaffected parts online with up to three independent Service Zones.
Birim REST Lockv1.0.0
Lock the WordPress REST API for logged-out visitors. Allowlist routes, stop username enumeration, import from Disable REST API.
WPBuoy Endpoint Managerv2.4.3
View, search, filter, and disable WordPress REST API endpoints. Reduce your attack surface and log blocked requests — no code required.
Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.
Check plugin compatibility and repository health, track updates, roll back WordPress.org plugins, and download installed versions as ZIP files.
BotCreds Agent Accessv2.3.2
Scoped, per-agent application passwords for AI agents, MCP clients, and automation tools.
Disable WP REST APIv2.6.9
Disables the WP REST API for visitors not logged into WordPress.