Force WP REST API endpoints to only be served over HTTPS.
As of April 2026, WP REST API Force SSL is a WordPress api plugin with 10 active installations and a 5/5 rating from 1 reviews. It has been downloaded 3.5K+ times in total. Requires WordPress 4.4+ and PHP false+. Available on WordPress.org since 2014. Last updated 9 years ago — may have compatibility concerns. Top alternative: WP Consent API.
Did you find this plugin helpful? Please consider leaving a 5-star review.
Note: This plugin requires the WP REST API (WP API) plugin.
For site owners who want the WP REST API served over SSL always and forever.
All HTTP requests to the WP REST API will be 301 redirected to their HTTPS equivalent.
Also, don’t use this plugin unless you have an SSL certificate as your endpoints will break! 🙂
Development of this plugin is done on GitHub. Pull requests welcome. Please see issues reported there before going to the plugin forum.
| WordPress | 4.4+ requiredTested up to 4.5.33 |
| PHP | false+ required |
Props fjarrett
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.