by Jeff Starr
4.8 (36 reviews)
Disable WP REST API
Disables the WP REST API for visitors not logged into WordPress.
Compatible with WP 6.9
v2.6.6
Current Version v2.6.6
Updated 2 months ago
Last Update on 13 Nov, 2025
Synced 6 hours ago
Last Synced on
Rank
#1,181
—
No change
Active Installs
20K+
—
No change
KW Avg Position
111.5
+0.7 better
Downloads
340.9K
+133 today
Support Resolved
0%
—
No change
Rating
96%
Review 4.8 out of 5
4.8
(36 reviews)
Next Milestone 30K
20K+
30K+
43
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 1,188 more installs to reach 30K+
Rank Changes
Current
#1,181
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.8
36 reviews
Overall
96%
5
34
(94%)
4
0
(0%)
3
1
(3%)
2
0
(0%)
1
1
(3%)
Tracked Keywords
Showing 4 of 4| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| rest-api | 65 | — | Tag | 18 hours ago |
| rest | 80 | — | Tag | 18 hours ago |
| JSON | 108 | — | Tag | 18 hours ago |
| disable | 193 | — | Tag | 18 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 2.6.6
- Last Updated
- Nov 13, 2025
- Requires WP
- 4.7+
- Tested Up To
- 6.9
- PHP Version
- 5.6.20 or higher
- Author
- Jeff Starr
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 4.8
- Reviews
- 36
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade Now
Frequently Asked Questions
Common questions about Disable WP REST API
{"code":"rest_login_required","message":"REST API restricted to authenticated users.","data":{"status":401}}
Technically this plugin only disables REST API for visitors who are not logged into WordPress. With that in mind, here are some good reasons why someone would want to disable REST API for non-logged users: The REST API may not be needed for non-logged users Disabling the REST API conserves server resources Disabling the REST API minimizes potential attack vectors Disabling the REST API prevents content scraping and plagiarism I'm sure there are other valid reasons, but you get the idea :)
Yep, actually there are two other "Disable REST" plugins: Disable JSON API Disable REST API The first of those plugins is awesome and provides a LOT more features and functionality than is required to simply disable REST. And the second plugin was shut down due to lack of use. I wrote my disable-REST plugin because I wanted something super lightweight, fast, and effective. If you are looking for more options and features, then check out the first of those two listed alternatives.
Testing is easy: Log out of WordPress Using a browser, request https://example.com/wp-json/ If you see the following message, REST is disabled: "rest_login_required: REST API restricted to authenticated users." Then if you log back in and make a new request for https://example.com/wp-json/, you will see that REST is working normally.
Yes, if the REST endpoints are registered with the WP REST API.
Yes. It works the same regardless of which editor (Classic or Block) you are using.
By default the plugin displays a message for unauthenticated users: "REST API restricted to authenticated users." To customize that message to whatever you want, add the following code via functions.php or simple custom plugin: function disable_wp_rest_api_error_custom($message) { return 'Customize your message here.'; // change this to whatever you want } add_filter('disable_wp_rest_api_error', 'disable_wp_rest_api_error_custom');
As explained in this thread, the plugin Contact Form 7 requires REST API access in order for the contact form to work. To allow for this, follow this guide.
Send any questions or feedback via my contact form