Disable WP REST API
by Jeff Starr · WordPress.org page · Website
Disable WP REST API has 30,000+ active installs on WordPress.org and 440,864 downloads all time. It was downloaded 6,777 times in the last 30 days. The last update was on August 10, 2026, tested up to WordPress 7.1.3.
Disable WP REST API at a glance
Is Disable WP REST API well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- One-click disable all routes
- One-click disable all /users routes
- Disable any specific user routes based on role
- Whitelist any user IDs
- Whitelist any IP addresses
- Customize the REST error message
- Customize the REST response code
- Always require or force SSL/TLS
- Disable all JSONP shenanigans
- One-click disable any REST API headers
- Add any post meta (custom field) to REST API
- Add any user meta (custom field) to REST API
Disable WP REST API reviews and ratings
36 reviews on WordPress.org, with the most recent ones as their authors posted them.
36 reviews
- 5★
-
34
- 4★
-
0
- 3★
-
1
- 2★
-
0
- 1★
-
1
-
good job
good job
pftsoi -
Very simple and effective
just activate the plugin and it works.
terrymason -
I like it!
I've tried many different solutions using functions.php because I did not want to install yet another plugin. I'm glad I found this one though. It's simple, lightweight, maintains privacy, and functions with the latest version of WordPress. Thanks Jeff!
WildStar -
Good Stuff - but make many other things more complicate
In generel a Good security concept . But at the other end many plugin developer use the Rest API Could be done much easier with a 5 3 line htaccess rule to block only ^.*wp-json/wp/v2/(users But anyway a good solution if you have a simpel installation.
metaeditor -
Blocks Contact Form 7 forms sending
As the title says: Blocks Contact Form 7 forms sending after install and activate.
Hendrik57 -
Super simple plugin
Great plugin, takes nopower from the blog:)
tinaponting
Download and install history
11,052 downloads over the last 48 days. Snapshots taken daily from WordPress.org.
Disable WP REST API alternatives
Plugins that solve the same problem, ranked by how closely they overlap with Disable WP REST API.
-
WordPress REST API 10,000+ installs · 4.2 -
Disable REST API 80,000+ installs · 4.8 -
WPGet API 10,000+ installs · 5.0 -
JWT Authentication for WP REST APIs 10,000+ installs · 4.4 -
JSON Content Importer 5,000+ installs · 4.9
Details
Disables the WP REST API for visitors not logged into WordPress.
The full description, screenshots and every review live on the WordPress.org page.
Tags
- api
- disable
- JSON
- rest
- rest-api
More from Jeff Starr
-
Disable Gutenberg 500,000+ installs -
GA Google Analytics 400,000+ installs -
BBQ Firewall 100,000+ installs -
Blackhole for Bad Bots 30,000+ installs
- Version
- 2.6.9
- Last updated
- Aug 10, 2026
- First published
- Jun 6, 2018
- Requires WordPress
- 4.7
- Tested up to
- 7.1.3
- Requires PHP
- 5.6.20
- Pricing
- Free on WordPress.org
Disable WP REST API FAQ
What does Disable WP REST API do?
According to its WordPress.org readme, Disable WP REST API offers One-click disable all routes, One-click disable all /users routes, Disable any specific user routes based on role, Whitelist any user IDs and Whitelist any IP addresses.
How many active installs does Disable WP REST API have?
WordPress.org reports 30,000+ active installs for Disable WP REST API as of October 22, 2026.
Is Disable WP REST API still maintained?
Yes. The last release was on August 10, 2026 and it is tested up to WordPress 7.1.3.
Is Disable WP REST API free?
Disable WP REST API is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.