Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Alternatives to WP-REST-API V2 Menus
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Lock the WordPress REST API for logged-out visitors. Allowlist routes, stop username enumeration, import from Disable REST API.
Disables the WP REST API for visitors not logged into WordPress.
Connect WordPress to any REST API. Configure endpoints, manage credentials securely, and display data using shortcodes or template functions.
Enhance WordPress REST API by including configurable user meta fields in post responses without additional API requests.
Explore, test, document, and export WordPress REST API routes from a private admin console.
Enable caching of the WordPress REST API and auto-flush caches upon wp-admin editing.
Connect to any external REST API or JSON endpoint. Fetch, display, and cache dynamic data using shortcodes or PHP repeaters effortlessly.
Synchronize REST/JSON API data into a fast local WordPress database table and render it without API calls on page loads.
Fetch, cache, and display data from any external REST API or XML source via shortcode, sidebar widget, or Gutenberg block.