WP REST API Explorer
WordPress exposes a REST (Representational State Transfer) API at /wp-json/. This page queries the public routes — posts, users, types — to show what an unauthenticated visitor can enumerate, which helps during security audits and migrations.
What is the WordPress REST API?
It is the JSON interface used by the block editor and many plugins. By default /wp-json/wp/v2/users can reveal author names, and post endpoints reveal counts and types. None of that is a vulnerability on its own, but it is useful reconnaissance — restrict or disable what you do not need.
This tool runs entirely in your browser. Your inputs and files are processed locally and are never sent to or stored on Kinetikatech servers.
Related pages
Server problem? Hacked site? Slow website?
Critical issues answered within 30 minutes, 24 hours a day, 7 days a week.