> ## Documentation Index
> Fetch the complete documentation index at: https://kb.hosting.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Disabling REST API for JSON in WordPress

> Discover how to disable the REST API in WordPress using the Disable REST API plugin to whitelist specific endpoints.

The [WordPress](https://hosting.com/hosting/platforms/wordpress-hosting/managed-wordpress-hosting/) REST API allows developers to interact with sites remotely by sending and receiving JSON (JavaScript Object Notation) objects. Although the REST API is useful for developers, most WordPress site owners may not need it all. The [WordPress](https://hosting.com/hosting/platforms/wordpress-hosting/managed-wordpress-hosting/) REST API is also known to slow down the site and opens up for DDOS attacks, and these are probably valid reasons to disable the REST API. Disable REST API is a plugin that allows you to control access points to the WordPress REST API without touching the functions.php file. This article shows you how to use the Disable REST API plugin to manage and whitelist endpoints registered with the WordPress REST API.

## Installing Disable REST API Plugin for WordPress

To install and configure Disable REST API plugin, follow these steps:

1. Log in to your [WordPress](https://hosting.com/hosting/platforms/wordpress-hosting/managed-wordpress-hosting/) site with an administrator account.

2. On the **Dashboard** in the left sidebar, click **Plugins** and then click **Add New**:\
   ![](https://static.hosting.com/kb/kb-wp-disableRESTAPI-4.png)

3. Search for "**Disable REST API**" click **Install**, and then click **Activate** the plugin:\
   ![](https://static.hosting.com/kb/kb-wp-disableRESTAPI-1.png)

4. To access the plugin, in the main menu, click on **Settings**, and then click on **Disable REST API**:\
   ![](https://static.hosting.com/kb/kb-wp-disableRESTAPI-5.png)

5. Select and whitelist endpoints registered with the REST API:\
   ![](https://static.hosting.com/kb/kb-wp-disableRESTAPI-2.png)

6. Click on **Save** to save the changes. If you need to reset changes,click on **Reset Whitelisted:**

***

## Related articles

* [Adding CAPTCHA protection to a WordPress site](/docs/adding-captcha-protection-to-a-wordpress-site)

* [Configuring WordPress to always use SSL](/docs/configuring-wordpress-to-always-use-ssl)