Really prevents the REST API from handling requests (default) or require user to be logged in.

Samuel Aguilera

<p>The WordPress REST API is a great resource, but if you don’t want to use it probably you will want to close this door to your WordPress.</p>
<p>Unlike other popular plugins that aims to disable the REST API but <strong>only return an error, processed by the REST API</strong>, when a request is received, by default, this plugin <strong>removes all filters and actions related to WordPress REST API, and returns a 404 error for requests sent to the REST API URL endpoints, effectively blocking any use of the REST API</strong>.</p>
<p>Optionally you can set the <strong>REST API setting in Settings -> General page</strong> to “Logged In Only” for a less drastical action, to keep REST API access enabled but require the user to be logged in to accept the requests.</p>
<p>If you’re happy with the plugin <a href="https://wordpress.org/plugins/sar-disable-rest-api/reviews/?filter=5" rel="ugc">please don’t forget to give it a good rating</a>, it will motivate me to keep sharing and improving this plugin (and others).</p>
<p><strong>SUPPORT:</strong> If you have any support question, please <a href="https://github.com/samuelaguilera/sar-disable-rest-api/issues" rel="nofollow ugc">create an issue at the Github repository</a>.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 4.7 or higher.</li>
</ul>
<h4>Features</h4>
<ul>
<li>Disable WordPress core REST API <strong>for real</strong> by removing all filters and actions related to it and returning a 404 error for requests sent to REST API URL endpoints (e.g. https://example.com/wp-json/whatever ).</li>
<li>Option to require user to be logged in to use the REST API instead of completely disable it.</li>
</ul>
<h4>Usage</h4>
<p>To disable the REST API completely simply install the plugin from the Plugins page and enable it.</p>
<p>If you don’t want to disable the REST API but require user to be logged in instead, go to Settings -> General page and set the REST API to option to “Logged In Only”, and click Save Changes.</p>
<p>You can change the option back to “Off” if you want to disable the REST API again.</p>
<p>To return to WordPress default, simply deactivate the plugin.</p>


Disable REST API for Real

A simple way to disable WordPress REST API.



Alternatives to Disable REST API for Real

Top alternatives