Àpèjúwe
Allows tweaking of several REST API settings
- Disable the REST API
- Remove WordPress core endpoints
- Require authentication for core endpoints
- Force SSL
- WP-CLI commands: wp rest-api-toolbox
Find us on GitHub at https://github.com/petenelson/wp-rest-api-toolbox
(Creative commons toolbox image provided by James Tworow https://www.flickr.com/photos/sherlock77/)
Àwọn àwòrán ìbòjú
General admin settings 
WordPress core settings
Ìgbéwọlẹ̀
- Upload rest-api-toolbox to the
/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- Visit the Settings -> REST API Toolbox page to customize
FAQ
Have any questions? We can answer them here?
Àwọn àgbéyẹ̀wò
Igbe 18, 2025
Superb utility. Thanks !
Needs to be part of Core WP.
Èbìbí 23, 2024
amazing plugin
Òkúdù 8, 2021
A very usable plugin for under the hood tweaking and enhanced security.
Ṣẹrẹ 1, 2020
Amazing, and easy to use. Lovee it!
Bélú 5, 2017
This plugin enables three different settings for each REST API endpoint:
No authentication required,
Authentication required, or
Not available at all.
It also makes it possible to force https and to disable JSONP.
So, together with proper authentication methods and appropriate permissions, this plugin ensures that the REST API can be used without compromising security.
Thank you!
Èrèlé 7, 2017
Adds options to disable the REST API as well as disable endpoints.
Àwọn Olùkópa & Olùgbéejáde
“REST API Toolbox” jẹ́ ètò ìṣàmúlò orísun ṣíṣí sílẹ̀. Àwọn ènìyàn wọ̀nyí ti ṣe ìkópa sí plugin yìí.
Àwọn Olùkópa
A ti túmọ̀ “REST API Toolbox” sí àwọn èdè agbègbè 2. Ọpẹ́lọpẹ́ fún àwọn atúmọ̀ èdè fún àwọn ìkópa wọn.
Túmọ̀ “REST API Toolbox” sí èdè rẹ.
Ṣe o nífẹ̀ẹ́ sí ìdàgbàsókè?
Ṣàwárí koodu, ṣàyẹ̀wò ibi ìpamọ́ SVN, tàbí ṣe àgbékalẹ̀ sí àkọsílẹ̀ ìdàgbàsókè nípasẹ̀ RSS.
Àkọsílẹ̀ àwọn àyípadà
1.4.4 January 2nd, 2025
- Fixed deprecated notices for PHP 8 (props @thefrosty).
1.4.3 March 25th, 2021
- No longer check for SSL when running any WP-CLI commands.
1.4.2 February 13th, 2017
- Fixed bug in requiring authentication for endpoints that accessed specific items (ex: /wp/v2/users/1)
1.4.1 January 16th, 2017
- Added settings support for No Custom Post Types
- Fixed undefined variable notice (props @funkolector)
1.4.0 January 13th, 2017
- Added support for removing or requiring authentication for custom post types.
- Updated Settings UI for better clarity.
- Added link to settings page from the plugins list page.
1.3.0 December 12th, 2016
- Added option to require authentication for core endpoints.
1.2.0 December 5th, 2016
- Updated the way the REST API can be disabled due to the rest_enabled filter being deprecated.
- Added ‘settings’ to the list of core endpoints that can be removed.
- Added CLI command: wp rest-api-toolbox status
1.1.0 April 16, 2016
- Change REST API prefix
- Remove specific core endpoints
- Disable JSONP
1.0.0 April 15, 2016
- Initial release