Title: Rest API restriction
Last modified: January 16, 2019

---

# Rest API restriction

 *  Resolved [jameshadley](https://wordpress.org/support/users/jameshadley/)
 * (@jameshadley)
 * [7 years, 5 months ago](https://wordpress.org/support/topic/rest-api-restriction/)
 * Hey All,
 * On running a health check I received the following error / result that references
   iThemes security.
 * Can anyone explain to mean exactly what this means (in laymans terms) and how
   to fix it please?
 *  The REST API call gave the following unexpected result: (401) {“code”:”itsec_rest_api_access_restricted”,”
   message”:”You do not have sufficient permission to access this endpoint. Access
   to REST API requests is restricted by iThemes Security settings.”,”data”:{“status”:
   401}}.

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [nlpro](https://wordpress.org/support/users/nlpro/)
 * (@nlpro)
 * [7 years, 5 months ago](https://wordpress.org/support/topic/rest-api-restriction/#post-11099052)
 * The REST API setting in the **WordPress Tweaks** module is probably set to “Restricted
   Access (recommended)”. The setting includes a link to an article on iThemes blog
   which explains things…
 *  Thread Starter [jameshadley](https://wordpress.org/support/users/jameshadley/)
 * (@jameshadley)
 * [7 years, 5 months ago](https://wordpress.org/support/topic/rest-api-restriction/#post-11108560)
 * [@nlpro](https://wordpress.org/support/users/nlpro/) Brilliant – thank you for
   your reply!
 * Its just as you said and now I’ve read the article I understand why it is so.
 * Thanks again,
 * Regards,James
    -  This reply was modified 7 years, 5 months ago by [jameshadley](https://wordpress.org/support/users/jameshadley/).
      Reason: To close the issue
 *  [moreware](https://wordpress.org/support/users/moreware/)
 * (@moreware)
 * [7 years, 1 month ago](https://wordpress.org/support/topic/rest-api-restriction/#post-11522527)
 * I use the “default access” setting. But when I run a Securty check, the setting
   fals back in “restricted access” which is causing that my portfolio is not accessable
   on my website. Is this normal?..

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Rest API restriction’ is closed to new replies.

 * ![](https://ps.w.org/better-wp-security/assets/icon.svg?rev=3529351)
 * [Kadence Security – Password, Two Factor Authentication, and Brute Force Protection](https://wordpress.org/plugins/better-wp-security/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/better-wp-security/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/better-wp-security/)
 * [Active Topics](https://wordpress.org/support/plugin/better-wp-security/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/better-wp-security/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/better-wp-security/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [moreware](https://wordpress.org/support/users/moreware/)
 * Last activity: [7 years, 1 month ago](https://wordpress.org/support/topic/rest-api-restriction/#post-11522527)
 * Status: resolved