Dave McHale

Tang Rufus

<p>The most comprehensive plugin for controlling access to the WordPress REST API!</p>
<p>Works as a “set it and forget it” install. Just upload and activate, and the entire REST API will be inaccessible to your general site visitors.</p>
<p>But if you do need to grant access to some endpoints, you can do that too. Go to the Settings page and you can quickly whitelist individual endpoints (or entire branches of endpoints) in the REST API.</p>
<p>You can even do this on a per-user-role basis, so your unauthenticated users have one set of rules while WooCommerce customers have another while Subscribers and Editors and Admins all have their own. NOTE: Out of the box, all defined user roles will still be granted full access to the REST API until you choose to manage those settings.</p>
<p>For most versions of WordPress, this plugin will return an authentication error if a user is not allowed to access an endpoint. For legacy support, WordPress 4.4, 4.5, and 4.6 use the provided <code>rest_enabled</code> filter to disable the entire REST API.</p>


Disable REST API

The plugin uses a is_user_logged_in() check to grant access to disabled REST API endpoints. I run a membership site for one year and just realized it now, that any logged in visitor STILL HAVE ACCESS to any disabled REST API endpoints.

This should be very explicit, and there should be a setting in the plugin settings page to set the minimum role for the user to have access to the disabled endpoints.

ANY logged-in visitor can view the disabled endpoints


Blocking the REST API entirely breaks plugins that require this functionality, so being able to selectively enable routes is perfect.



I recommend this plugin to everyone who uses Independent Analytics to secure their site while still enabling analytics to be recorded.


Excellent solution


The plugin does what it says on the tin, without being pretentious. Absolutely fantastic!


Fantastic

Disable the use of the REST API on your website to site users. Now with User Role support!

David Anderson / Team Updraft

Prashant Baldha

DNutbourne

aporter

Venkat Raj

WPGetAPI

<p>Connect WordPress to external APIs, without code.</p>
<p>Easily send data to any API and get data from unlimited 3rd party REST APIs. Format and display the returned data on your WordPress website using a shortcode or a template tag.</p>
<p><iframe loading="lazy" title="Quick intro to WPGetAPI" width="750" height="422" src="https://www.youtube.com/embed/X50qINEs1yo?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe></p>
<p>WPGet API supports virtually all authentication methods including API keys, bearer tokens, basic auth, username/password and <a href="https://wpgetapi.com/downloads/oauth-2-0-authentication/?utm_campaign=OAuth&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">OAuth 2.0 authorization</a>.</p>
<h3>Live Examples</h3>
<p>View our live examples of connecting to several different APIs and displaying the data in various unique ways including charts, graphs, tables and weather forecasts.</p>
<p><a href="https://wpgetapi.com/demo-connecting-wordpress-to-external-api/?utm_campaign=Demo&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">LIVE EXAMPLES – Connecting WordPress to external APIs</a></p>
<h3>Major Features</h3>
<ul>
<li>Connect your WordPress website to any REST API</li>
<li>Unlimited APIs & endpoints</li>
<li>No coding required</li>
<li>Display API data using a template tag or shortcode</li>
<li>GET, POST, PUT, PATCH & DELETE methods</li>
<li>Add query string, header & body parameters</li>
</ul>
<h3>Documentation</h3>
<p>We have tons of articles and help available.</p>
<ul>
<li><a href="https://wpgetapi.com/docs/quick-start-guide/?utm_campaign=Docs&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">Quick Start Guide</a></li>
<li><a href="https://wpgetapi.com/docs/step-by-step-example/?utm_campaign=Docs&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">Step by Step Example</a></li>
<li><a href="https://wpgetapi.com/docs/frequently-asked-questions/?utm_campaign=Docs&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">Frequently Asked Questions</a></li>
<li><a href="https://wpgetapi.com/docs/will-this-work-with-my-api/?utm_campaign=OAuth&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">Will this work with my API?</a></li>
</ul>
<h3>Extending WPGet API</h3>
<h4>PRO Plugin</h4>
<p>The <strong><a href="https://wpgetapi.com/downloads/pro-plugin/?utm_campaign=Pro&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">PRO Plugin</a></strong> provides many extra features that allow you to do some more advanced things with your APIs. Features of the PRO Plugin include:</p>
<ul>
<li>Actions – automate your API when an action happens on your site</li>
<li>Tokens – grab dynamic data without code and send to your API</li>
<li>Dynamic variables – a PHP solution for grabbing dynamic values</li>
<li>Chain API calls</li>
<li>Cache API calls</li>
<li>Format API data into HTML</li>
<li>Retrieve nested data</li>
<li>Base64 encoded auth</li>
<li>XML format</li>
</ul>
<h4>API to Posts Plugin</h4>
<p>The <strong><a href="https://wpgetapi.com/downloads/api-to-posts/?utm_campaign=APItoPosts&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">API to Posts Plugin</a></strong> allows you to import API data and create WooCommerce products or custom posts from this API data. Features of the API to Posts Plugin include:</p>
<ul>
<li>Import API data</li>
<li>Import from unlimited endpoints</li>
<li>Map API data to WordPress fields</li>
<li>Supports custom fields, ACF, tags, categories, custom taxonomies, images and more</li>
<li>Supports all standard WooCommerce fields</li>
<li>Create WooCommerce products from API data</li>
<li>Sync API to WooCommerce products & posts</li>
<li>Set interval of sync from every minutes up to once a week</li>
</ul>
<h4>OAuth 2.0 Authorization</h4>
<p>The <strong><a href="https://wpgetapi.com/downloads/oauth-2-0-authentication/?utm_campaign=OAuth&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">OAuth 2.0 Authorization</a></strong> plugin allows authorization of your API through the OAuth 2.0 method.</p>
<h3>WPGet API Integrations</h3>
<p>WPGet API integrates extremely well with other WordPress plugins, allowing you to do some very cool things with your API. Click the links below for more info on these integrations.</p>
<ul>
<li><a href="https://wpgetapi.com/docs/connect-woocommerce-to-api/?utm_campaign=Integrations&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">WooCommerce to API</a></li>
<li><a href="https://wpgetapi.com/docs/woocommerce-api-product-sync/?utm_campaign=Integrations&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">WooCommerce API Product Sync</a></li>
<li><a href="https://wpgetapi.com/docs/send-contact-form-7-data-to-api/?utm_campaign=Integrations&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">Contact Form 7 send data to API</a></li>
<li><a href="https://wpgetapi.com/docs/send-wpforms-data-to-api/?utm_campaign=Integrations&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">WPForms send data to API</a></li>
<li><a href="https://wpgetapi.com/docs/send-gravity-forms-data-to-api/?utm_campaign=Integrations&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">Gravity Forms send data to API</a></li>
<li><a href="https://wpgetapi.com/docs/using-with-wpdatatables/?utm_campaign=Integrations&utm_medium=wporg&utm_source=readme" rel="nofollow ugc">Charts & Tables from API data using wpDataTables</a></li>
</ul>
<h3>Translating WPGet API</h3>
<p>You can translate WPGet API into your own language on <a href="https://translate.wordpress.org/projects/wp-plugins/wpgetapi/" rel="nofollow ugc">translate.wordpress.org</a></p>
<p>Here is an article to help <a href="https://make.wordpress.org/polyglots/handbook/translating/first-steps/" rel="nofollow ugc">get started with translations</a></p>


WPGet API – Connect to any external REST API

Connect any REST API to WordPress. WPGet API enables easy API integration, allowing you to display API data without any code.

Disable REST API vs WPGet API – Connect to any external REST API