REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.
Alternatives to WPBuoy Endpoint Manager
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Hide and manage external download and redirect URLs behind customizable buttons and a clean titanium.download endpoint.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
Turn Off REST APIv1.1.4
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Birim REST Lockv1.0.0
Lock the WordPress REST API for logged-out visitors. Allowlist routes, stop username enumeration, import from Disable REST API.
Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.
Caledros Helperv1.0.1
Adds an Admin Menu that allows removing the default block patterns. It also allows deactivating the WordPress REST API for non-authenticated users.
REST API Manager For ACFv1.0.4
Custom REST API endpoint plugin to return ACF fields, post meta (selected keys), or a mixed object. Fully configurable from the admin settings page.