REST API

For XMLRPC interface there is already an option to disable the 2FA:

It would be great if you add the same feature for the REST API.

If you run a API POST request e.g. create a new user I need admin privileges.
But then I can restrict the IP to specific hosts.
For attackers getting JWT or Basic Auth credentials I can use 2FA to discourage them from login in to the WordPress website.

I think this would be a great integration!

Thanks!