Lock the WordPress REST API for logged-out visitors. Allowlist routes, stop username enumeration, import from Disable REST API.
Alternatives to Disable WP REST API
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.
View, search, filter, and disable WordPress REST API endpoints. Reduce your attack surface and log blocked requests — no code required.
Explore, test, document, and export WordPress REST API routes from a private admin console.
Secure, feature-rich WordPress plugin to manage and host JSON files with persistent, scoped REST endpoints. Create your own mock APIs easily.
Secure and protect WordPress REST API from unauthorized access using JWT token, Basic Authentication, API Key, OAuth 2, or external token.
Restrict user profile editing with granular role-based controls, additional wp-admin page restrictions, REST API protection, and custom redirects.