REST API Module — User Guide

The REST API Module is a security and management tool built into Advanced Analytics. It gives WordPress administrators full visibility and control over every registered REST API endpoint (/wp-json/) — including the ability to disable endpoints, restrict HTTP methods, and hide routes from discovery responses.

Enable / Disable the Module

The REST API module is a standalone module inside Advanced Analytics. You can enable or disable it without affecting any other part of the plugin or WordPress itself.

1. Navigate to Error Logs → Settings in the WordPress admin sidebar.
2. Click the “REST API Options” tab (or scroll to the section headed REST API Security Module).
3. Toggle the “Enable REST API module” checkbox.
4. Click Save Changes.

Endpoint List

This is the main screen. It shows every registered REST API endpoint on your site in a sortable, filterable table. At the top, a summary bar displays:

• Total endpoints — The number of REST API endpoints registered on the site.
• Disabled — How many endpoints are fully disabled.
• Obfuscated — How many endpoints are hidden from the REST API discovery index.

Columns

Filtering & Searching

Search Box

Use the search box in the top-right corner of the list page. It searches by endpoint route and namespace.

• Type part of a route or namespace and press Enter or click Search Endpoints.
• The search is case-insensitive and matches partial text.
• To clear the search, empty the box and press Enter.

Dropdown Filters

Use the dropdown menus above the table then click Filter:

Single Endpoint Actions

Hover over any endpoint row to reveal these actions below the route:

Editing an Endpoint

Click Edit on any row to open the endpoint configuration page.

The edit page displays the endpoint’s route and namespace at the top, followed by three configuration options:

Click Save Changes to apply the rules, or use the “← Back to REST API Endpoints” link to return to the list without saving.

Disabling Endpoints

Disabling an endpoint completely blocks all HTTP requests to that route. Any request will receive:

{
    "code": "rest_endpoint_disabled",
    "message": "This REST API endpoint has been disabled.",
    "data": {
        "status": 403
    }
}

How to Disable an Endpoint

Option A — Quick toggle from the list:

1. Go to Error Logs → REST API.
2. Hover over the endpoint row and click Disable.
3. The endpoint status changes to Disabled immediately.

Option B — From the edit page:

1. Go to Error Logs → REST API.
2. Click Edit on the endpoint row.
3. Check “Disable Endpoint Entirely”.
4. Click Save Changes.

Disabling Specific Methods

Instead of disabling an entire endpoint, you can selectively block individual HTTP methods. This is useful when you want to allow reading data but prevent modifications.

Example: Allow GET but Block DELETE

1. Go to Error Logs → REST API and click Edit on the endpoint.
2. Under “Disable Specific Methods”, check the DELETE checkbox.
3. Leave GET unchecked so read access remains.
4. Click Save Changes.

The endpoint status in the list will show as Partial (orange) and the disabled method badge will appear with a strikethrough.

When a disabled method is used, the response will be:

{
    "code": "rest_method_disabled",
    "message": "The DELETE method has been disabled for this endpoint.",
    "data": {
        "status": 403
    }
}

Obfuscating Endpoints

Obfuscation hides an endpoint from REST API discovery responses without disabling it. The endpoint remains fully functional — it is simply removed from:

• The main REST API index at /wp-json/
• Namespace-specific index responses (e.g. /wp-json/wp/v2)

How to Obfuscate an Endpoint

1. Go to Error Logs → REST API and click Edit on the endpoint.
2. Check “Obfuscate Endpoint”.
3. Click Save Changes.

In the endpoint list, an obfuscated endpoint will show a hidden icon (eye with a line through it) next to the route.

Bulk Actions

You can enable or disable multiple endpoints at once using bulk actions.

1. On the endpoint list page, select the checkboxes next to the endpoints you want to change.
2. From the Bulk Actions dropdown, choose Disable or Enable.
3. Click Apply.

CSV Export

You can export the endpoint list to a CSV file, including any currently applied filters.

1. Apply any desired filters (namespace, method, status, access) and/or a search query.
2. Click the CSV Export button above the table.
3. A progress bar appears while the export processes in batches.
4. Once complete, the CSV file downloads automatically.

CSV Columns

Screen Options

Click the Screen Options tab at the top-right of the endpoint list page to configure:

• Number of endpoints to show — Sets how many endpoints are displayed per page. Default: 50.

Troubleshooting