Disable WP REST API vs WPRaiz Content API Tool

Does one thing: Completely disables the WordPress REST API for visitors who are not logged into WordPress. No configuration required. Important: This plugin completely disables the WP REST API for visitors who are NOT logged in to WordPress. So not recommended if your site needs the WP REST API for any non-logged users. 👉 The fast, simple way to prevent abuse of your site’s REST/JSON API 👉 Protects your site’s REST data from all non-logged users and bots 👉 Uses only 4KB of code, so super lightweight, fast, and effective 🛠️ Pro version available! Check out REST Pro Tools » Features Disable REST/JSON for visitors (not logged in) Disables REST header in HTTP response for all users Disables REST links in HTML head for all users 100% plug-and-play, set-it-and-forget solution How does it work? This plugin completely disables the WP REST API unless the user is logged into WordPress. For logged-in (authenticated) users, WP REST API works normally For logged-out (unauthenticated) users, WP REST API is disabled What happens if logged-out visitor makes a JSON/REST request? They will get only a simple message: rest_login_required: REST API restricted to authenticated users. This message may customized via the filter hook, disable_wp_rest_api_error. Check out this post for an example of how to do it. Pro Version 🛠️ Check out the Pro version, REST Pro Tools, loaded with many awesome features: One-click disable all routes One-click disable all /users routes Disable any specific user routes based on role Whitelist any user IDs Whitelist any IP addresses Customize the REST error message Customize the REST response code Always require or force SSL/TLS Disable all JSONP shenanigans One-click disable any REST API headers Add any post meta (custom field) to REST API Add any user meta (custom field) to REST API Add routes for site profile and author profile Add routes for featured images and post categories Add routes for post taxonomies and terms At-a-glance check status of REST API The free version does only one thing: disables REST API for unauthenticated users. The PRO version can do that and much more! Take full control of the REST API with REST Pro Tools » Privacy This plugin does not collect or store any user data. It does not set any cookies, and it does not connect to any third-party locations. Thus, this plugin does not affect user privacy in any way. If anything it improves user privacy, as it protects potentially sensitive information from being displayed/accessed via REST API. Disable WP REST API is developed and maintained by Jeff Starr, 15-year WordPress developer and book author. Support development of this plugin I develop and maintain this free plugin with love for the WordPress community. To show support, you can make a donation or purchase one of my books: The Tao of WordPress Digging into WordPress .htaccess made easy WordPress Themes In Depth Wizard’s SQL Recipes for WordPress And/or purchase one of my premium WordPress plugins: BBQ Pro – Blazing fast WordPress firewall Blackhole Pro – Automatically block bad bots Banhammer Pro – Monitor traffic and ban the bad guys GA Google Analytics Pro – Connect WordPress to Google Analytics Head Meta Pro – Ultimate Meta Tags for WordPress REST Pro Tools – Awesome tools for managing the WP REST API Simple Ajax Chat Pro – Unlimited chat rooms USP Pro – Unlimited front-end forms Links, tweets and likes also appreciated. Thank you! 🙂

WPRaiz Content API Tool turns your WordPress site into a powerful content API. Create posts, manage categories, generate AI content, and connect AI agents — all via REST API or Model Context Protocol (MCP). What You Can Do Create & Update Posts — Full control over title, content, status, categories, tags, excerpt, featured images, and custom meta fields via REST API. Bulk Creation — Create up to 50 posts in a single request (Pro). AI Content Generation — Generate full articles from a topic using Claude or OpenAI with your own API keys (Pro). AI Rewrite — Improve SEO, fix grammar, change tone, expand, or summarize existing posts (Pro). Auto-SEO — Automatically generate SEO titles and meta descriptions when not provided. Supports SEOPress, Yoast SEO, and Rank Math. MCP Server — Connect AI agents (Claude Desktop, Cursor, Windsurf) directly to your site via Model Context Protocol. Similar Post Search — Find duplicate or related content using intelligent Levenshtein-based scoring. Webhooks — Get notified when posts are created or bulk operations complete, with HMAC signature verification. JWT Authentication — Secure token-based auth with configurable rate limiting. Free vs Pro Free (this plugin): Create and update single posts via REST API Search similar posts List and manage categories JWT and Basic Auth (Application Passwords) SEO plugin auto-detection and meta writing Featured image upload from URL Rate limiting Legacy v1 endpoint compatibility Pro ($49/year at wpraiz.com.br/pro): Everything in Free, plus: Bulk post creation (up to 50 per batch) AI content generation (BYOK — Claude or OpenAI) AI post rewriting (5 modes) Auto-SEO via AI MCP Server (HTTP + STDIO transports) Webhook notifications with HMAC signing Priority support MCP Server The Model Context Protocol server lets AI agents interact with your WordPress site natively. Available via HTTP (REST API) or STDIO (WP-CLI). Tools: create_post, update_post, search_similar, get_categories, generate_content, rewrite_post, bulk_create Resources: site-info, recent-posts, categories, content-stats, seo-config Prompts: publish_seo_article, content_series, seo_audit, refresh_old_content, internal_linking Add to your claude_desktop_config.json: { "mcpServers": { "wpraiz": { "command": "wp", "args": ["wpraiz-mcp", "serve", "--path=/path/to/wordpress", "--user=1"] } } } REST API Endpoints Base URL: https://yoursite.com/wp-json/wpraiz/v2/ Endpoint Method Auth Tier create-post POST JWT/Basic Free update-post POST JWT/Basic Free create-posts POST JWT/Basic Pro generate-content POST JWT/Basic Pro rewrite-post POST JWT/Basic Pro search-similar GET Public Free categories GET Public Free check-status GET Public Free auth/token POST Credentials Free Authentication JWT Token: 1. POST to auth/token with username and password 2. Use the returned token as Authorization: Bearer Basic Auth: Use WordPress Application Passwords with standard HTTP Basic authentication. Requirements WordPress 5.8+ PHP 7.4+ For AI features: Claude API key or OpenAI API key For MCP STDIO: WP-CLI installed Support Visit wpraiz.com.br or open an issue on GitHub.