JSON API User

73 Quality Score

Active Installs

14/30

Popularity scores well above baseline with 1,000 active installs, but the niche use case keeps total adoption small compared to mainstream auth plugins.

Update Freshness

25/25

Maintenance is excellent, with a recent update on June 17, 2026 and confirmed compatibility with WordPress 7.0 and PHP 7.4.

User Rating

12/15

User ratings are decent at 78 out of 100 from 21 reviewers, suggesting most users are satisfied though the sample size is small.

Support Health

8/15

Support health is weak, with zero support threads opened or resolved, which means there is no track record of the author helping users in the forum.

WP Compatibility

15/15

Compatibility is full marks, tested against WordPress 7.0 and requiring only PHP 7.4, which keeps it accessible on most modern hosts.

Scores higher than 29% of indexed plugins

About

Extends the JSON API Plugin to allow RESTful user registration, authentication & many other User Meta, BP functions. A Pro version is also available.

Active Installs 1k+

Rating ★★★½ 3.9/5

Last Updated 2026-09-07 10:12pm GMT

Requires WordPress 3.0.1+

Tested Up To 7.1

Requires PHP 7.4+

Security History

2 known vulnerabilities, all patched

1 Critical 1 Medium

Most recent: July 2, 2026

View details ▸

What It Does

JSON API User extends the now-defunct JSON API plugin by providing RESTful endpoints for user registration, login, password resets, and user meta manipulation, including BuddyPress xProfile fields. In practice, it lets you drive WordPress user accounts from external apps or front-end JavaScript without writing custom AJAX handlers. A paid Pro version adds extra endpoints and Facebook login support.

Who It's For

This plugin is built for developers building headless WordPress setups, mobile apps, or progressive web apps that need user authentication and account management through a JSON interface. It is most useful on older projects still running the original JSON API plugin or sites that need a quick way to expose user-related endpoints without adopting the WordPress REST API directly.

Who Should Skip It

Anyone starting a new project should skip this plugin and use the built-in WordPress REST API with JWT or Application Passwords, which offer better security, broader support, and a more active ecosystem. It is also a poor fit for non-technical site owners, since configuration and security hardening require developer knowledge.

The Bottom Line

JSON API User scores 72.63 out of 100 and fills a narrow gap for legacy JSON API users who need user-centric REST endpoints. New projects are better served by the core WordPress REST API plus a modern auth plugin. The zero support threads and tiny install base mean you should not rely on it for anything critical without in-house expertise.

Related Plugins

Two Factor 84/100

Pick Two Factor if you need standard two-factor authentication for admin logins on a conventional WordPress dashboard rather than API-driven access.

WP-Members Membership Plugin 82/100

Choose WP-Members if you are building a traditional membership site with front-end registration forms instead of a headless or app-based architecture.

Google Authenticator 80/100

Opt for Google Authenticator if you want time-based one-time password login for existing users without touching your API layer.

WP Limit Login Attempts 79/100

Use WP Limit Login Attempts as a lightweight brute-force defense that complements any authentication setup rather than replacing it.

Authorizer 79/100

Go with Authorizer if you need to restrict dashboard access through SSO providers like Google or OAuth rather than expose REST endpoints.