REST API Guardv1.5.0
Restrict and control anonymous access to the WordPress REST API, with optional JSON Web Token (JWT) authentication.
Alternatives to HeadlessKey – JWT Auth
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
JWT authentication for the WordPress REST API: access and refresh tokens with rotation, revocation, and validation for headless and decoupled apps.
JWT Authentication for CoCart API.
MirSecurev1.0.1
MirSecure protects your WordPress REST API by allowing access only to authenticated users.
API Bearer Authv20200916
Access and refresh tokens based authentication plugin for the REST API.
Manage access to the WordPress REST API by restricting public endpoints, enabling specific route allow-listing, and handling API key authentication.
Validates Cloudflare Access JWTs at the WordPress origin so protected paths stay closed to requests that bypass Cloudflare.
Secure and protect WordPress REST API from unauthorized access using JWT token, Basic Authentication, API Key, OAuth 2, or external token.
NovaCraft API Builderv1.0.1
The free, WordPress.org-compatible REST API foundation for headless WooCommerce stores — JWT authentication, API keys, caching, and a React admin UI.
Sticklightv1.1.0
Use WordPress authentication and permissions in external React applications via secure REST API endpoints.