invisnet

The REST API is essential for any modern web framework, but with it comes a huge attack surface. WP REST API Security reduces the attack surface by disabling all the REST API endpoints by default, allowing you to enable only those actually needed. Those that are enabled require authentication by default, allowing you to choose which to make public.
<blockquote>
N.B. If you are using the new Block Editor you must keep nearly all the endpoints enabled for it to work, but none need be public.
</blockquote>

WP REST API Security

Provides a UI to control which REST API endpoints are enabled and which require authentication.

Evan Herman

Tracy Levesque

Code Parrots

yikesitskevin

karmadharma

jpowersdev

WP REST API Controller allows admins to toggle the visibility of, and customize the endpoints for, all core and custom post types and taxonomies within WordPress with an easy-to-use graphical interface. Additionally, you can tweak visibility and customize the meta data attached to the API response.
<blockquote>
Note: This plugin requires WordPress Version 4.7 or later to work.
</blockquote>
Features:
<ul>
<li>Enable/Disable REST API endpoints for post types and taxonomies.</li>
<li>Enable/Disable post type/taxonomy meta data (add or remove meta fields from API requests).</li>
<li>Rename post type/taxonomy base endpoints.</li>
<li>Rename post type/taxonomy meta data names in API requests so they are more user friendly.</li>
<li>Manipulate and control post types/taxonomies and their data created by third party plugins and themes.</li>
<li>Granular control of API responses without writing a single line of PHP code.</li>
<li>Filters included to alter and extend default functionality.</li>
<li>Localized and ready for translations.</li>
</ul>

WP REST API Controller

This plugin is amazing, taking a complicated thing and making it easy to accomplish. Thanks!!

I wish I could give you 10 stars

Enable a UI to toggle visibility and customize properties in WP REST API requests.

WP REST API Security vs WP REST API Controller