JWT Authentication for WP REST API
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
- 4.4★
- from 53 ratings
- 60k+
- active installs
- Updated
- Feb 2026
- Tested to
- WP 6.9.7
WPScore
9 plugins compared · Updated August 2026 · Wp-api
Choosing a WordPress plugin for wp-api comes down to a few things: whether it is still actively maintained, whether real users rate it well, and whether it does the specific job you need without dragging the rest of the site down.
We ranked 9 plugins using our WPScore, which weighs the user rating (adjusted for how many people actually rated it), how many sites run it, how recently it was updated, and which WordPress version it is tested against. 9 of them have enough public data to be scored; the rest are listed below the ranked block, clearly marked, rather than being given a number we cannot justify.
How this list is funded. Some links here earn us a commission if you buy. It costs you nothing extra, and it does not move anything up the list — the order comes from the WPScore, which is calculated from public ratings, install counts and update history. See the method.
At a glance
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
WPScore
A simple plugin that adds a password reset facility to the WordPress REST API using a code. The process is a two step process:
WPScore
Expose Advanced Custom Fields in the WordPress REST API with proper access control.
WPScore
Stores meta data (i.e plugin settings) from the meta field of a WP REST API posts or pages POST creation call in the created page or post meta data.
WPScore
Extends WordPress WP REST API with new routes pointing to WordPress menus.
WPScore
Plugs Advanced Custom Fields (ACF) data into the WordPress JSON API (WP-API).
WPScore
This plugin include all available taxonomy attributes into the WordPress REST API (v2) without additional API requests.
WPScore
Run advanced searches via the WordPress REST API and SearchWP.
WPScore
Returns Yoast post or page metadata in a normal post or page request.
WPScore