HeadlessKey – JWT Authv1.0.0
A complete authentication solution for Headless WordPress applications using JWT, supporting Registration, SSO, RBAC, and advanced Security features.
Alternatives to REST API Guard
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
JWT authentication for the WordPress REST API: access and refresh tokens with rotation, revocation, and validation for headless and decoupled apps.
Secure and protect WordPress REST API from unauthorized access using JWT token, Basic Authentication, API Key, OAuth 2, or external token.
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
Control WordPress REST API access by requiring user authentication with API key system.
API Bearer Authv20200916
Access and refresh tokens based authentication plugin for the REST API.
IC Security Guardv1.3.0
Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.
Manage access to the WordPress REST API by restricting public endpoints, enabling specific route allow-listing, and handling API key authentication.
MirSecurev1.0.1
MirSecure protects your WordPress REST API by allowing access only to authenticated users.
Validates Cloudflare Access JWTs at the WordPress origin so protected paths stay closed to requests that bypass Cloudflare.