Lock the WordPress REST API for logged-out visitors. Allowlist routes, stop username enumeration, import from Disable REST API.
Alternatives to WP API Options
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Disables the WP REST API for visitors not logged into WordPress.
WordPress REST API with Swagger UI.
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Expose Advanced Custom Fields in the WordPress REST API with proper access control.
Explore, test, document, and export WordPress REST API routes from a private admin console.
Enhance WordPress REST API by including configurable user meta fields in post responses without additional API requests.
This plugin provides custom endpoints to the WordPress REST API.
Synchronize REST/JSON API data into a fast local WordPress database table and render it without API calls on page loads.