REST Pro Tools for WordPress REST API Access

Manage WordPress REST API behavior

REST Pro Tools is the paid version for website administrators who need control over REST routes, access, responses, headers, and selected data. Its access model can allow normal operation for logged-in, authenticated visitors while restricting unauthenticated access. Before restricting routes, check whether the site needs REST API access for non-logged-in users.

Set route rules and exceptions

• Disable all routes with a one-click setting.
• Disable all visitor routes under the /users endpoint.
• Disable specific user routes based on role.
• Whitelist user IDs or IP addresses for selected exceptions.

These controls let administrators apply broad restrictions while allowing access for particular users or network addresses.

Configure responses, transport, and headers

Set the error message and response code returned when access is restricted. REST Pro Tools can require or force SSL/TLS and disable JSONP behavior. It also has a one-click option to disable REST API headers, a setting to disable the REST header in HTTP responses, and an option to remove REST links from the HTML head for all users. An at-a-glance status view shows the current REST API state.

Add selected data and routes

The plugin can add post and user metadata to the REST API. Additional routes cover site profiles and author profiles, featured images and post categories, and post taxonomies and terms. These options expose selected information when a connected workflow or WordPress project needs it.

Configure and check the settings

1. Install and activate REST Pro Tools in WordPress.
2. Review the REST API status and select the access model required for the site.
3. Disable routes, user routes, headers, JSONP, or other REST components as needed.
4. Add role rules, user ID exceptions, or IP address whitelists where appropriate.
5. Configure response details, SSL/TLS requirements, metadata, and additional routes.
6. Test authenticated and unauthenticated requests to confirm the intended behavior.