LocoAI
89LocoAI - Auto Translate For Loco Translate is a powerful tool for developers looking to quickly translate thei...
Free
70k+ installs 4.9★ (637)
Disable REST API
Disable the use of the REST API on your website to site users. Now with User Role support!
The facts
- Rating
- 4.8★ from 38
- Active installs
- 80k+
- Price
- Free
- Last updated
- 14 Sep 2023
- Added
- Oct 2014
- Requires WP
- 4.9
- Tested up to
- WP 6.3.10
- Requires PHP
- 5.6
- Downloads
- 780,528
Our analysis
AI-assistedDisable REST API is a WordPress plugin designed to control access to the WordPress REST API. Once activated, it restricts access for general site visitors while allowing you to whitelist specific endpoints or branches for certain user roles through the settings page. This makes it suitable for sites that require fine-grained control over who can access the API features.
The plugin is particularly useful for site administrators who want to enhance security by limiting API access based on user roles. It provides a straightforward solution to manage permissions without needing extensive technical knowledge.
Best for: This plugin suits WordPress site administrators looking to secure their REST API access.
What it does well
- ✓Comprehensive control over REST API access
- ✓Ability to whitelist endpoints for specific user roles
- ✓Easy to install and activate
- ✓Returns authentication errors for unauthorized users
- ✓Legacy support for older WordPress versions
Where it falls short
- •Requires initial configuration to manage user role settings
- •All user roles have full access by default until changed
Verdict
Disable REST API offers a clear method to manage API access, making it a practical choice for those prioritising security and user role management.
From the developer
Dave McHale's own description of Disable REST API, lightly tidied.
The most comprehensive plugin for controlling access to the WordPress REST API!
Works as a “set it and forget it” install. Just upload and activate, and the entire REST API will be inaccessible to your general site visitors.
But if you do need to grant access to some endpoints, you can do that too. Go to the Settings page and you can quickly whitelist individual endpoints (or entire branches of endpoints) in the REST API.
You can even do this on a per-user-role basis, so your unauthenticated users have one set of rules while WooCommerce customers have another while Subscribers and Editors and Admins all have their own. NOTE: Out of the box, all defined user roles will still be granted full access to the REST API until you choose to manage those settings.
For most versions of WordPress, this plugin will return an authentication error if a user is not allowed to access an endpoint. For legacy support, WordPress 4.4, 4.5, and 4.6 use the provided rest_enabled filter to disable the entire REST API.
Tagged as
purpose
API & Integrations
Alternatives
Other plugins for integrating services.
The AI + Automation plugin for WordPress. Automate workflows across all your plugins and apps, add an AI agent...
Free
40k+ installs 4.9★ (156)
Create custom interactive maps with free Leaflet-based styles, no Google Maps API key, frontend marker submiss...
Free
10k+ installs 5★ (67)
Activity Log
87Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audi...
Free
200k+ installs 4.3★ (74)
Reviews Feed
87No API key required. Display Yelp and Google reviews for any business in a clean, customizable feed on your si...
Free
100k+ installs 4.4★ (34)
Contact Form, Google Sheet, MailChimp, Brevo, Webhook, Zoho CRM Automation and Integration plugin that Connect...
Free
20k+ installs 4.9★ (160)