Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Alternatives to WP REST API Helper
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.
Disables the WP REST API for visitors not logged into WordPress.
Make Connector. Make lets you design, build, and automate by connecting with WordPress in just a few clicks.
Lock the WordPress REST API for logged-out visitors. Allowlist routes, stop username enumeration, import from Disable REST API.
This plugin provides custom endpoints to the WordPress REST API.
Adds an Admin Menu that allows removing the default block patterns. It also allows deactivating the WordPress REST API for non-authenticated users.
Deploy self-contained HTML/CSS/JS apps to WordPress via REST API. One call from any AI agent or CI pipeline — plugin handles the rest.
The free, WordPress.org-compatible REST API foundation for headless WooCommerce stores — JWT authentication, API keys, caching, and a React admin UI.
Test an external REST API connection in WordPress, inspect its feed, and use the result to build a custom frontend interface.