RESTless is a tiny WordPress plugin which disables access to the REST API (available in WordPress since version 4.4) for non-authenticated users. This prevents usage of the REST API by the general public and limits access to those with login credentials. No REST for the wicked..