Headless REST API Security
v2.2by Md. Rakib Ullah · updated 8 months ago
Manage access to the WordPress REST API by restricting public endpoints, enabling specific route allow-listing, and handling API key authentication.
- Rank
- #20,266
- No change yet
- Active installs (est.)
- ≈ 56
- 50+ reported · High
- Total downloads
- 1.8K
- 1,822 all-time
- Rating
- 5.0/5
- 2 reviews
- Support resolved
- –
- 0 of 0 threads, last 2 months
Headless REST API Security at a glance
Headless REST API Security is a WordPress plugin by Md. Rakib Ullah with 50+ active installs, the #20,266 most popular plugin on WordPress.org. On a typical day it’s downloaded about 9 times, about the same as the month before. It’s rated 5.0 out of 5 from 2 reviews. Version 2.2 came out on Feb 22, 2026 and is tested up to WordPress 6.9.11. Among the 78 plugins tagged “permissions”, it ranks #16. It was first released in 2026.
Chart time range
Applies to every chart below. History from Oct 10, 2026, 30 days.
Downloads over time
Download stats217 downloads · the last 30 days
View as table
| Date | Headless REST API Security |
|---|---|
| Nov 2, 2026 | 14 |
| Nov 1, 2026 | 11 |
| Oct 31, 2026 | 12 |
| Oct 30, 2026 | 9 |
| Oct 29, 2026 | 6 |
| Oct 28, 2026 | 12 |
| Oct 27, 2026 | 11 |
| Oct 26, 2026 | 8 |
| Oct 25, 2026 | 8 |
| Oct 24, 2026 | 6 |
| Oct 23, 2026 | 9 |
| Oct 22, 2026 | 8 |
| Oct 21, 2026 | 7 |
| Oct 20, 2026 | 4 |
| Oct 19, 2026 | 11 |
| Oct 18, 2026 | 11 |
| Oct 17, 2026 | 8 |
| Oct 16, 2026 | 7 |
| Oct 15, 2026 | 8 |
| Oct 14, 2026 | 15 |
| Oct 13, 2026 | 8 |
| Oct 12, 2026 | 8 |
| Oct 11, 2026 | 6 |
| Oct 10, 2026 | 10 |
Unusual spikes are usually updates, not new installs.
Estimated installs
≈ 56 · +7.7% in the last 30 days
View as table
| Date | Estimated installs |
|---|---|
| Nov 9, 2026 | 56 |
| Nov 8, 2026 | 56 |
| Nov 7, 2026 | 56 |
| Nov 5, 2026 | 55 |
| Nov 4, 2026 | 55 |
| Nov 3, 2026 | 54 |
| Nov 2, 2026 | 54 |
| Nov 1, 2026 | 53 |
| Oct 31, 2026 | 53 |
| Oct 30, 2026 | 53 |
| Oct 29, 2026 | 53 |
| Oct 28, 2026 | 52 |
| Oct 27, 2026 | 52 |
Rank over time
#20,266 · up 874 in the last 30 days
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | #20,266 |
| Nov 7, 2026 | #20,410 |
| Nov 6, 2026 | #20,572 |
| Nov 5, 2026 | #20,544 |
| Nov 4, 2026 | #20,595 |
| Nov 3, 2026 | #20,811 |
| Nov 2, 2026 | #20,768 |
| Nov 1, 2026 | #21,006 |
| Oct 31, 2026 | #21,048 |
| Oct 30, 2026 | #21,009 |
| Oct 29, 2026 | #21,040 |
| Oct 28, 2026 | #21,138 |
| Oct 27, 2026 | #21,140 |
Growth %
Average +0.57% a day in the last 30 days
View as table
| Date | Growth |
|---|---|
| Nov 9, 2026 | 0.00% |
| Nov 8, 2026 | 0.00% |
| Nov 7, 2026 | +0.91% |
| Nov 5, 2026 | 0.00% |
| Nov 4, 2026 | +1.85% |
| Nov 3, 2026 | 0.00% |
| Nov 2, 2026 | +1.89% |
| Nov 1, 2026 | 0.00% |
| Oct 31, 2026 | 0.00% |
| Oct 30, 2026 | 0.00% |
| Oct 29, 2026 | +1.92% |
| Oct 28, 2026 | 0.00% |
Active installs band
50+ on WordPress.org
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | 50+ |
| Nov 8, 2026 | 50+ |
| Nov 7, 2026 | 50+ |
| Nov 6, 2026 | 50+ |
| Nov 5, 2026 | 50+ |
| Nov 4, 2026 | 50+ |
| Nov 3, 2026 | 50+ |
| Nov 2, 2026 | 50+ |
| Nov 1, 2026 | 50+ |
| Oct 31, 2026 | 50+ |
| Oct 30, 2026 | 50+ |
| Oct 29, 2026 | 50+ |
| Oct 28, 2026 | 50+ |
| Oct 27, 2026 | 50+ |
Search rankings
Where it appears in WordPress.org search for the searches you track, checked every day.
See where Headless REST API Security ranks in search
Track this plugin to check its position for the searches you choose, daily, with an alert when it moves.
Change log
From our daily snapshot of WordPress.org- Rank #21138 → #20544
- Tested up to 6.9.10 → 6.9.11
Versions in use
Share of active installs on each published version, from WordPress.org.
- v2.2100%
Rating trend
5.0★★★★★2 reviews · steady in the last 30 days
Requirements & info
Version history- Version
- 2.2
- Requires WordPress
- 5.8
- Tested up to
- 6.9.11
- Requires PHP
- 7.4
- First released
- Jan 20, 2026
- Last updated
- Feb 22, 2026
- Releases, last 12 months
- …
Questions about Headless REST API Security
How many websites use Headless REST API Security?
Headless REST API Security is active on 50+ WordPress sites, as WordPress.org reports it. WordPress.org rounds the number down, so the real count is somewhat higher. That makes it the #20,266 most popular plugin on WordPress.org.
How many times has Headless REST API Security been downloaded?
1,822 times in total since 2026. On a typical day it’s downloaded about 9 times. See download stats
When was Headless REST API Security last updated?
Version 2.2 came out on Feb 22, 2026 (8 months ago).
Is Headless REST API Security compatible with the latest WordPress?
Headless REST API Security’s readme says it’s tested up to WordPress 6.9.11, while the current version is 7.1. That doesn’t mean it breaks, but its author hasn’t confirmed it works with the latest releases.
Is Headless REST API Security still maintained?
Its last release was 8 months ago. No support threads were opened in the last two months.
What rating does Headless REST API Security have?
5.0 out of 5 from 2 reviews on WordPress.org.
What are the best alternatives to Headless REST API Security?
The plugins most like Headless REST API Security, by the tags they share, are CoCart (900+), Easy Basic Authentication (800+) and WooCommerce Legacy REST API (400K+). Compare all alternatives
Latest reviews
Analyze reviewsReview stats
5.0
★★★★★
2 reviews
- 5 stars: 2 reviews, 100%
- 4 stars: 0 reviews, 0%
- 3 stars: 0 reviews, 0%
- 2 stars: 0 reviews, 0%
- 1 stars: 0 reviews, 0%
- Positive
- 100%4–5★
- Mixed
- 0%3★
- Critical
- 0%1–2★
Compare with competitors
Add up to 1 competitor. No account needed.
| Metric | |
|---|---|
| Estimated installs | ≈ 56 |
| Reported installs | 50+ |
| Rating | 5.0 |
| Reviews | 2 |
| Total downloads | 1.8K |
| Author | Md. Rakib Ullah |
| First released | Jan 20, 2026 |
| Version | 2.2 |
| Requires WP | 5.8 |
| Requires PHP | 7.4 |
| Last updated | Feb 22, 2026 |
Alternatives to Headless REST API Security
Compare all alternativesPopular plugins with the same tags, the most in common first.
CoCart
by CoCart Headless
Ship your headless WooCommerce storefront faster. CoCart is the REST API built for Next.js, React, Vue, and any modern frontend — developer-first.
- Rank
- #7,127
- Installs
- 900+
- 4.9
Easy Basic Authentication
by Matteo Enna
Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.
- Rank
- #7,484
- Installs
- 800+
- 5.0
WooCommerce Legacy REST API
by Automattic
The WooCommerce Legacy REST API, which is now part of WooCommerce itself but will be removed in WooCommerce 9.0.
- Rank
- #154
- Installs
- 400K+
- 1.5
Disable REST API
by Dave McHale
Disable the use of the REST API on your website to site users. Now with User Role support!
- Rank
- #513
- Installs
- 80K+
- 4.8
JWT Authentication for WP REST API
by tmeister
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
- Rank
- #682
- Installs
- 60K+
- 4.4
Disable WP REST API
by Jeff Starr
Disables the WP REST API for visitors not logged into WordPress.
- Rank
- #966
- Installs
- 30K+
- 4.8
Side by side:Headless REST API Security vs CoCartHeadless REST API Security vs Easy Basic AuthenticationHeadless REST API Security vs WooCommerce Legacy REST API
More by Md. Rakib Ullah
See everything by Md. Rakib UllahOther plugins from this author in our catalog.
