RESTless disables REST calls for non-authenticated requests.
As of April 2026, RESTless is a WordPress rest plugin with 10 active installations and a 0/5 rating0. It has been downloaded 1.3K+ times in total. Requires WordPress 4.4+ and PHP false+. Available on WordPress.org since 2018. Last updated 7 years ago — may have compatibility concerns. Top alternative: Disable REST API.
RESTless is a tiny WordPress plugin which disables access to the REST API (available in WordPress since version 4.4) for non-authenticated users.
This prevents usage of the REST API by the general public and limits access to those with login credentials. No REST for the wicked.
It also supports WordPress Multisite installations.
Credits:
Sword icon used in the WordPress plugin repository and found as /assets/icon*
From the series ‘Sketchy’ By Shannon E Thomas
Thanks Shannon E Thomas and to[icon] for sharing your work!
WordPress repository banner image found in /assets/banner*:
Orginal painting: ‘Draak’
Drawn by: Utagawa Kuniyoshi
Dated around 1808 – 1861
Repository: Rijksmuseum.nl
Modified by: Björn Wijers
Thanks Rijksmuseum!
| WordPress | 4.4+ requiredTested up to 4.9.29 |
| PHP | false+ required |
First release
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.