PluginScout

Turn Off REST API — WordPress Security Plugin

by ksym04 · WordPress.org page · Website

v1.1.3 Tested up to WP 7.1 PHP 7.4+

Turn Off REST API has 100+ active installs on WordPress.org and 3,501 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on September 2, 2026, tested up to WordPress 7.1.

Turn Off REST API at a glance

Active installs
100+
Total downloads
3,501
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is Turn Off REST API well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1, the current release is 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Returns an authentication error for unauthenticated REST API requests
  • Optionally removes the REST API discovery links and headers from your page source
  • Lets you build an allow list of routes that should stay public (for example a contact form or a specific integration)
  • Adds a Site Health check so the restriction is clearly explained and never mistaken for a fault
  • Keeps the admin area, the block editor, and logged in functionality fully working

Details

Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.

The full description, screenshots and every review live on the WordPress.org page.

Rankings Turn Off REST API competes in

Tags

  • disable REST API
  • JSON
  • rest-api
  • security
  • wp-json

More from ksym04

Version
1.1.3
Last updated
Sep 2, 2026
First published
Mar 23, 2017
Requires WordPress
4.7
Tested up to
7.1
Requires PHP
7.4
Pricing
Free on WordPress.org

Turn Off REST API FAQ

What does Turn Off REST API do?

According to its WordPress.org readme, Turn Off REST API offers Returns an authentication error for unauthenticated REST API requests, Optionally removes the REST API discovery links and headers from your page source, Lets you build an allow list of routes that should stay public (for example a contact form or a specific integration), Adds a Site Health check so the restriction is clearly explained and never mistaken for a fault and Keeps the admin area, the block editor, and logged in functionality fully working.

How many active installs does Turn Off REST API have?

WordPress.org reports 100+ active installs for Turn Off REST API as of September 7, 2026.

Is Turn Off REST API still maintained?

Yes. The last release was on September 2, 2026 and it is tested up to WordPress 7.1.

Is Turn Off REST API free?

Turn Off REST API is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.