This plugin provides granular control over public access to a site's REST API, which is often fully open by default. It is designed for developers and site administrators who need to improve security and data privacy by limiting what anonymous visitors and automated scripts can retrieve.

• Anonymous access control: Disables all public access to the REST API with a single setting, preventing data exposure.
• Allowlist and denylist: Grants or denies anonymous access based on specific API namespaces and routes, using path matching.
• JWT authentication: Requires a JSON Web Token for API access, adding a layer of security for applications that need controlled public access.
• Endpoint restrictions: Blocks anonymous browsing of the API index and user endpoints by default, hiding site structure and user data.
• Programmatic configuration: All settings can be overridden via filters, allowing for custom logic and integration into existing codebases.