- Category rank
- #7 in Admin
- Listing audit
- 46/100
Disable REST API is a WordPress Plugin Directory app by Dave McHale. With a rating of 4.8★ from 38 reviews, it currently ranks #7 in the Admin category.
Disable REST API is the #7 ranked Admin app on WordPress, with a 4.8 average rating from 38 reviews, as of Sep 11, 2026.
AppRanks verdict
Generated from marketplace data as of Sep 11, 2026
Disable REST API ranks #7 of 669 in Admin on WordPress. It holds a 4.8★ average from 38 reviews on WordPress.
Pros
- +4.8★ average across 38 reviews
Cons
- −Only 38 reviews — the average can still move with a few new ratings
How Disable REST API works
The most comprehensive plugin for controlling access to the WordPress REST API!
Works as a “set it and forget it” install. Just upload and activate, and the entire REST API will be inaccessible to your general site visitors.
But if you do need to grant access to some endpoints, you can do that too. Go to the Settings page and you can quickly whitelist individual endpoints (or entire branches of endpoints) in the REST API.
You can even do this on a per-user-role basis, so your unauthenticated users have one set of rules while WooCommerce customers have another while Subscribers and Editors and Admins all have their own. NOTE: Out of the box, all defined user roles will still be granted full access to the REST API until you choose to manage those settings.
For most versions of WordPress, this plugin will return an authentication error if a user is not allowed to access an endpoint. For legacy support, WordPress 4.4, 4.5, and 4.6 use the provided rest_enabled filter to disable the entire REST API.
Standardized capabilities
AppRanks hasn't mapped this app to standardized capabilities yet. The developer's own feature list is shown above.
