Anonymous Access to Remote API
XML-RPC and SOAP remote APIs were deprecated in Confluence 5.5 and are disabled by default. They can be enabled, but we recommend using the fully supported Confluence Server REST API wherever possible.
Administrators may wish to disable anonymous access to the Confluence remote API (XML-RPC and SOAP APIs) to make it harder for malicious users to write 'bots' that perform bulk changes to the site.
To disable anonymous access to the remote API:
- Select Administration
, then select General Configuration - Select Security Configuration in the left-hand panel. The Security Configuration screen will appear.
- Select Edit.
- Clear the Anonymous Access to Remote API checkbox.
- Select Save.
Notes
This page is about access to the remote API. If you are looking for information about preventing anonymous users from accessing Confluence, see Global Permissions Overview.
Last modified on Dec 9, 2024
Powered by Confluence and Scroll Viewport.