Skip to content
Back to the index

REST API Only

wordpress.orgWebsite firewall, bot & spam protection

PulseGate's liveness check found it on 13 Sep 2026; it is registered on WordPress.org and has been in the index since 25 Jun 2026. How this is checked

REST API Only is a WordPress plugin that forces all non-admin, non-AJAX, and non-REST API requests to return a 404 status code. It's designed for developers building headless WordPress sites or those who want to expose only the API, enhancing security and reducing unnecessary web traffic.

Inferred · not functionally tested

FreeWeb
Visit wordpress.org

Overview

4 features

Purpose: Securing headless or API-only WordPress sites by blocking non-API access.

Inferred · not functionally tested

Audience: wordpress developers

Inferred · not functionally tested

Functions: Unknown

Interfaces: API: indicated (inferred, not tested) · MCP: unknown · CLI: unknown · Self-hosting: unknown

Recorded constraints: pricing: free · license: Proprietary · platforms: WEB, API · deployment: browser

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: wordpress.org · wordpress.org. These links do not verify the individual claims.

REST API Only sits in PulseGate's Website firewall, bot & spam protection category. Inferred · not functionally tested: It focuses on securing headless or API-only WordPress sites by blocking non-API access. Inferred · not functionally tested: It is built as a B2B product for wordpress developers. Basis unknown · not verified: It is available for free. Basis unknown · not verified: REST API Only is available on the web.

jakubkanna builds and maintains REST API Only, and it first shipped in 2025. Inferred · not functionally tested: Key capabilities include API-only mode, 404 for non-API requests, and Headless WordPress support. The interface is available in English and Mongolian.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • API-only mode
  • 404 for non-API requests
  • Headless WordPress support
  • Easy activation

Topics: Inferred · not functionally tested

Tags
headless-wordpressapi-onlysecurity-pluginrest-api

JSON profile · Text profile · Access guide

Built with & integrations

Runs on
Browser

Trust & compliance

Public signals
HTTPSPrivacy PolicyFree tierMulti-language
Legal
Privacy Policy

Indexing history

What PulseGate has recorded for this listing

Nothing recorded for this listing in this window.

Frequently asked questions about REST API Only

What does REST API Only do?
Inferred · not functionally tested: REST API Only focuses on securing headless or API-only WordPress sites by blocking non-API access. It is catalogued under Website firewall, bot & spam protection on PulseGate.
Who should use REST API Only?
Inferred · not functionally tested: REST API Only is a B2B product built for wordpress developers.
Does REST API Only have a free plan?
Basis unknown · not verified: Yes — REST API Only is free to use.
What platforms does REST API Only run on?
Basis unknown · not verified: REST API Only runs on the web.
Is REST API Only still active?
PulseGate's liveness check found it on 13 Sep 2026.
What are alternatives to REST API Only?
Similar projects tracked by PulseGate include Disable WP REST API, Turn Off REST API, and Headless REST API Security.Disable WP REST APITurn Off REST APIHeadless REST API Security
Who makes REST API Only?
REST API Only is developed by jakubkanna.
How long has REST API Only been around?
REST API Only first shipped in 2025.

Similar projects

Closest matches by what these projects do