Disable REST API

The Disable REST API plugin is a comprehensive tool for managing access to the WordPress REST API.

Once installed and activated, it restricts the entire REST API from general site visitors.

However, it also provides the flexibility to whitelist specific endpoints or entire branches of endpoints in the REST API.

This can be done on a peruserrole basis, allowing different access rules for unauthenticated users, WooCommerce customers, Subscribers, Editors, and Admins.

Initially, all defined user roles have full access to the REST API, but these settings can be managed as needed.

This plugin is ideal for enhancing the security of your WordPress site and managing user access.