As given in the documentation here : http://devdocs.magento.com/guides/v2.0/rest/anonymous-api-security.html
By default magento 2 only restrict Catalog, Store and CMS API from anonymous users.

In a same way how I can restrict access for all the available API's in magento 2?

The reason is I am building an Mobile app and website based on Angular and I wanted that only my app and website should have access to all the API.


To disable Anonymous Guest Access Go to

Admin > Menu > Store > Configration > Services > Magento Web API > Web API Security

Allow Anonymous Guest Access set to No

If you Set Allow Anonymous Guest Access set to No, Magento Website will not function properly as some API is used by Magento Checkout Process. You have to disable Guest Checkout.

Check http://devdocs.magento.com/guides/v2.0/rest/anonymous-api-security.html

  • As mentioned in question I have checked the documentation already. It restrict only Catalog, Store, CMS related api's. My question is how I can restrict the access to API other than Catalog, Store and CMS pages. – manish_khot Jun 1 '17 at 12:34
  • Have you tried it, Catalog, Store, CMS api are not public by default. – Arun Karnawat Jun 2 '17 at 5:25
  • Yes they are restricted by default. But there is no restrictions provided by default magento on other api's like customers, Quote etc... I want to add restriction all the other api's too. – manish_khot Jun 2 '17 at 6:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.