WordPress Application Layer
WordPress Application Layer is a plugin that sits between the WordPress REST API and your client applications. It lets you control exactly what data is exposed, who can access it, how it is shaped, and at what rate — without touching WordPress core or your theme.
by Cédric Moris Kelly · github.com/afterglowweb/wordpress-rest-api-firewall · website
★ 0stars
0forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/afterglowweb/wordpress-rest-api-firewall/archive/refs/heads/main.zipDeclares an update source (https://wal.abc-plugins.com), so updates arrive through the plugin's own updater.
From the readme
WordPress Application Layer
📖 Documentation
WordPress Application Layer sits between WordPress and your client applications.
It lets you control what data is exposed, who can access it, how it is shaped, and at what rate, while also hardening key WordPress surfaces such as login and IP access.
Beyond REST API responses, it can also drive your front-end through webhooks. WordPress events (post publish, user register, WooCommerce order, custom CRON...) can push data to your application in real time using the same schema as the REST API.
You can combine both approaches, or rely on webhooks only.
Designed for headless WordPress architectures, multi-application setups, event-driven delivery, and sites that need security hardening across both REST API and WordPress surfaces.
Alpha version
This plugin is under active development. Most documented features are implemented and functional — some are still being finalized. Architectural changes may still occur.
It is publicly available for testing and feedback. Stability is not yet guaranteed.
Core Capabilities
Secure Your WordPress — The first REST API firewall purpose-built for WordPress. IP filtering, rate limiting, login harden