invisnet

The REST API is essential for any modern web framework, but with it comes a huge attack surface. WP REST API Security reduces the attack surface by disabling all the REST API endpoints by default, allowing you to enable only those actually needed. Those that are enabled require authentication by default, allowing you to choose which to make public.
<blockquote>
N.B. If you are using the new Block Editor you must keep nearly all the endpoints enabled for it to work, but none need be public.
</blockquote>

WP REST API Security

Provides a UI to control which REST API endpoints are enabled and which require authentication.

icdsoft

madjarov

This plugin helps you to automatically connect your WordPress site to the ICDSoft WordPress MultiManager toolkit available in the ICDSoft Account Panel. The WordPress MultiManager toolkit allows you to add and manage multiple WordPress sites from a single interface.
The WP MultiManager plugin opens the following custom REST-API methods:
<ul>
<li>users/</li>
<li>users/impersonate</li>
<li>users/impersonate/nonce</li>
<li>
users/impersonate/token
</li>
<li>
plugins/
</li>
<li>plugins/upload</li>
<li>plugins/update</li>
<li>
plugins/updates
</li>
<li>
themes/
</li>
<li>themes/installed</li>
<li>themes/install</li>
<li>themes/update</li>
<li>
themes/updates
</li>
<li>
core/
</li>
<li>core/update.</li>
</ul>

MultiManager WP – Manage All Your WordPress Sites Easily

Helps to automatically connect a WordPress site to the ICDSoft WordPress MultiManager tool which allows users to manage multiple WordPress sites from  …

WP REST API Security vs MultiManager WP – Manage All Your WordPress Sites Easily