---
title: Settings - REST
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

On this tab, you can adjust settings related to [Kentico REST service](https://docs.kentico.com/k11/integrating-3rd-party-systems/kentico-rest-service.md). The following settings can be adjusted:

| General                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| ----------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Service enabled                           | Enables or disables the Kentico REST service. See [Configuring the REST service](https://docs.kentico.com/k11/integrating-3rd-party-systems/kentico-rest-service/configuring-the-rest-service.md).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Service enabled for                       | Choose if the REST service allows access to objects, pages, or both.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Always check page security                | If disabled, security is not checked when accessing published versions of pages. If enabled, security is always checked.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Page access is read only                  | If enabled, the REST service only allows GET requests for pages (pages cannot be modified).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| Object access is read only                | If enabled, the REST service only allows GET requests for objects (objects cannot be modified).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| Allowed page types                        | Specifies a list of page types that the REST service is allowed to access. Enter the names of page types separated by semicolons.<br>If empty, all page types are allowed.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| Allowed object types                      | Specifies a list of object types that the REST service is allowed to access.<br>Enter object type values separated by semicolons. To find the values for specific object types, open the **System** application in the Kentico administration interface and select the **Object types** tab.<br>If empty, all object types are allowed.                                                                                                                                                                                                                                                                                                                                               |
| Generate authentication hash for URL      | Click the button to generate an authentication hash for specific REST URLs.<br>Enter the full absolute URL of the REST request, including the protocol, website domain name, virtual directory, REST path, and query string parameters. For example:<br>_http://mywebsite.com/rest/content/currentsite/en-us/all/news?format=json_<br>The system adds the authentication hash parameter to the URL. You can copy the URL and use it to perform the REST request without authentication headers.<br>**Restrictions**:<br>Only works for GET requests (read only data retrieval)<br>You cannot use hash parameter authentication for _/all_ object retrieval requests (_\~/rest//all_). |
| Default encoding                          | Sets the character encoding that the REST service uses for requests that do not contain a supported _Accept-Charset_ header.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Allow sensitive fields for administrators | If enabled, REST requests authenticated using the credentials of users with the Global administrator [privilege level](https://docs.kentico.com/k11/managing-users/user-management.md) are allowed to work with data fields that contain sensitive information (for example fields related to passwords).<br>Requests authenticated under non-administrator users can NEVER access sensitive fields, regardless of this setting's value.                                                                                                                                                                                                                                              |