Sites may wish to disable anonymous access to the remote API to make it harder for malicious users to write 'bots' that perform bulk changes to the site. If you wish to enable the Remote APIs but do not want anonymous users to access Confluence remotely, you can disable anonymous access from the Administration Console.
To disable anonymous access to Remote APIs,
- Go to the 'Administration Console' and click on 'General Configuration' in the left panel.
- Click 'Edit' at the bottom of the 'Options and Settings' screen.
- Select 'Off' beside 'Anonymous Access to API'.
- 'Save' your changes.
RELATED TOPICS
