---
title: Settings - REST
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

You can access these settings in the **Settings** application under the **Integration** -> **REST** category. In this section, you can adjust settings related to the [Xperience REST service](https://docs.kentico.com/13/integrating-3rd-party-systems/xperience-rest-service.md). The following settings can be adjusted:

| General                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| ----------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Service enabled                           | Enables or disables the REST service. See [Configuring the REST service](https://docs.kentico.com/13/integrating-3rd-party-systems/xperience-rest-service/configuring-the-rest-service.md).                                                                                                                                                                                                                                             |
| Service enabled for                       | Choose if the REST service allows access to objects, pages, or both.                                                                                                                                                                                                                                                                                                                                                                    |
| Always check page security                | If disabled, security is not checked when accessing published versions of pages. If enabled, security is always checked.                                                                                                                                                                                                                                                                                                                |
| Page access is read only                  | If enabled, the REST service only allows GET requests for pages (pages cannot be modified).                                                                                                                                                                                                                                                                                                                                             |
| Object access is read only                | If enabled, the REST service only allows GET requests for objects (objects cannot be modified).                                                                                                                                                                                                                                                                                                                                         |
| Allowed page types                        | Specifies a list of page types that the REST service is allowed to access. Enter the code names of page types separated by semicolons.<br>If empty, all page types are allowed.                                                                                                                                                                                                                                                         |
| Allowed object types                      | Specifies a list of object types that the REST service is allowed to access.<br>Enter object type values separated by semicolons. To find the values for specific object types, open the **System** application in the administration interface and select the **Object types** tab.<br>If empty, all object types are allowed.                                                                                                         |
| Generate authentication hash for URL      | Allows you to authenticate individual REST requests and invalidate previously authenticated requests.<br>See [Authenticating REST requests](https://docs.kentico.com/13/integrating-3rd-party-systems/xperience-rest-service/authenticating-rest-requests.md).                                                                                                                                                                          |
| Default encoding                          | Sets the character encoding that the REST service uses for requests that do not contain a supported _Accept-Charset_ header.                                                                                                                                                                                                                                                                                                            |
| Allow sensitive fields for administrators | If enabled, REST requests authenticated using the credentials of users with the Global administrator [privilege level](https://docs.kentico.com/13/managing-users/user-management.md) are allowed to work with data fields that contain sensitive information (for example fields related to passwords).<br>Requests authenticated under non-administrator users can NEVER access sensitive fields, regardless of this setting's value. |