How to disable or restrict Plesk XML API?

Question

How to disable or restrict Plesk XML API?

Answer

It's possible to disable completely the XML API or allow operations only from trusted IP addresses.

To do so, add the following entries to the panel.ini file.

• To prohibit all connections via XML API:

  [api]
  enabled = off

• To allow connections via XML API only from specific IP addresses:

  [api]
  allowedIPs = 203.0.113.2,192.0.2.2

  Where the allowedIPs setting accepts one or more IP addresses separated by commas or whitespace ( ) characters.