# Server blocks requests to WordPress REST API

**URL:** <https://forum.infinityfree.com/t/server-blocks-requests-to-wordpress-rest-api/116853>\
**Category:** Hosting Support\
**Created:** [December 6, 2025, 1:58pm UTC](https://forum.infinityfree.com/t/server-blocks-requests-to-wordpress-rest-api/116853 "2025-12-06T13:58:16Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![EdwardSkunk](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/edwardskunk/32/66982_2.png) [@EdwardSkunk](https://forum.infinityfree.com/u/EdwardSkunk)\
**Post date:** [December 6, 2025, 9:23pm UTC](https://forum.infinityfree.com/t/server-blocks-requests-to-wordpress-rest-api/116853/10 "2025-12-06T21:23:52Z")

</div>

> [@ldaelo](#):
>
> InfinityFree server, if I’m not mistaken, is optimized to host WordPress sites…

No, not specifically. You can host them on InfinityFree because WordPress is decently universal and only requires PHP and SQL. But that’s different from a host being “optimized” for WordPress. You may have noticed that trying to host an exceptionally busy WordPress site, or using demanding plugins can easily make hosting accounts reach their daily RAM and CPU limits.

> [@ldaelo](#):
>
> Security does NOT mean to block it.

It does when the API connections come from anywhere but the WordPress installation itself. This includes anything that can publish WordPress posts remotely.

> [@Why isn't API access working on my website?](https://forum.infinityfree.com/t/why-isnt-api-access-working-on-my-website/115198/1):
>
> ## Which APIs are affected?
> 
> This affects any type of programmatic access to your website, including:
> 
> - REST APIs endpoints hosted on your site
> - WordPress XML-RPC (used by many WordPress tools and plugins)

> [@Why won't my mobile app connect to my website?](https://forum.infinityfree.com/t/why-wont-my-mobile-app-connect-to-my-website/115197/1):
>
> ## Which apps are affected?
> 
> This affects any mobile app that tries to fetch content directly from your website, including:
> 
> - Custom apps you’ve developed that connect to your site
> - WordPress mobile apps trying to connect to your WordPress site
> - Social media apps trying to fetch content from your site
> - Any app using APIs hosted on your InfinityFree site

> [@ldaelo](#):
>
> And I don’t think posting to WordPress REST API does violate InfinityFree’s ToS, specifically this clause you must be referring to:

Admin has said in the past that using a workaround to do something that users aren’t intended to be able to do is frowned upon.

> [@Hosting on epizy.com is still possible, seemingly](https://forum.infinityfree.com/t/hosting-on-epizy-com-is-still-possible-seemingly/103950/6):
>
> However, know that by doing so, it should be considered an exploit, and we may choose to implement measures against “hacking” like that, which may give you trouble.

---

_[View the full topic](https://forum.infinityfree.com/t/server-blocks-requests-to-wordpress-rest-api/116853)._