Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Alternatives to WP API (V2) isFront
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Disable the REST API for logged-out visitors without breaking forms. Allowlist routes, stop user enumeration, import from Disable REST API.
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
WordPress REST API with Swagger UI.
Expose Advanced Custom Fields in the WordPress REST API with proper access control.
This plugin provides custom endpoints to the WordPress REST API.
Connect WordPress to any REST API. Configure endpoints, manage credentials securely, and display data using shortcodes or template functions.
Explore, test, document, and export WordPress REST API routes from a private admin console.
Enhance WordPress REST API by including configurable user meta fields in post responses without additional API requests.
Fetch, cache, and display data from any external REST API or XML source via shortcode, sidebar widget, or Gutenberg block.