Control RSD and authenticated XML-RPC

RSD discovery and authenticated XML-RPC methods have separate controls. Disable authenticated XML-RPC methods can affect remote publishing clients; it does not disable pingbacks or the complete endpoint.

Configure

  1. Open Settings → POM Tweaks → Optimization → HTML head cleanup.
  2. Enable the HTML head cleanup module.
  3. Select Remove RSD discovery link, complete any related fields, and save.
  4. Inspect the affected public page source, headers, or feed after refreshing caches.

Disable the individual option to stop its contribution on later requests. Other themes and plugins may still add their own metadata.

See Choose public head metadata for all options, generator precedence, verification and troubleshooting.