Turn Off REST APIv1.1.4
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Alternatives to Disable REST API for Real
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Disable WP REST APIv2.6.9
Disables the WP REST API for visitors not logged into WordPress.
Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.
Birim REST Lockv1.0.0
Lock the WordPress REST API for logged-out visitors. Allowlist routes, stop username enumeration, import from Disable REST API.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
WPBuoy Endpoint Managerv2.4.3
View, search, filter, and disable WordPress REST API endpoints. Reduce your attack surface and log blocked requests — no code required.
REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.
Import post content from the Wordpress REST API on another Wordpress site
Hungry REST API Monitorv1.0.4
Monitor WordPress REST API requests with detailed analytics, performance metrics, and beautiful visualizations. Full WooCommerce support included.
Expose Advanced Custom Fields in the WordPress REST API with proper access control.