Disable REST API
Disable the use of the REST API on your website to site users. Now with User Role support!
Disable REST API ranks #507 among WordPress.org plugins with 80,000+ active installations, a 4.8/5 rating from 38 reviews, and was last updated Sep 14, 2023. Data from WordPress.org, refreshed twice daily — see methodology.
Next Milestone 90K
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Rank Changes
Downloads Growth
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
Security History
Source: WPVulnerabilityNo known vulnerabilities on record for Disable REST API. Checked 1 week ago.
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- trunk
- Last Updated
- Sep 14, 2023
- Requires WP
- 4.9+
- Tested Up To
- 6.3
- PHP Version
- 5.6 or higher
- Author
- Dave McHale
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 4.8
- Reviews
- 38
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade Now
TL;DR
AI summary of the plugin's readmeThis plugin is for WordPress site administrators who want to control who can access their site's REST API. It solves the problem of unrestricted REST API access by letting admins block it entirely by default and selectively whitelist endpoints per user role.
- Disables REST API by default
- Whitelist individual endpoints
- Whitelist entire endpoint branches
- Per-user-role access rules
- Supports WooCommerce customer role
- Returns authentication error on denial
- Legacy support for WordPress 4.4–4.6
- Uses rest_enabled filter
Frequently Asked Questions
Common questions about Disable REST API