diff --git a/_config.php b/_config.php
index e69de29..f716afd 100644
--- a/_config.php
+++ b/_config.php
@@ -0,0 +1,3 @@
+<?php
+
+Object::add_extension('SiteConfig', 'RestfulSiteConfig');
diff --git a/code/RestfulServer.php b/code/RestfulServer.php
index d1daaf9..2fca183 100644
--- a/code/RestfulServer.php
+++ b/code/RestfulServer.php
@@ -76,6 +76,10 @@ class RestfulServer extends Controller {
 	 * Since no $Action url-param is set, all requests are sent here.
 	 */
 	function index() {
+		// if api is disabled globally, don't proceed
+		if (!SiteConfig::current_site_config()->EnableRESTAPI)
+		return $this->permissionFailure();
+
 		if(!isset($this->urlParams['ClassName'])) return $this->notFound();
 		$className = $this->urlParams['ClassName'];
 		$id = (isset($this->urlParams['ID'])) ? $this->urlParams['ID'] : null;
diff --git a/code/RestfulSiteConfig.php b/code/RestfulSiteConfig.php
new file mode 100644
index 0000000..eeca039
--- /dev/null
+++ b/code/RestfulSiteConfig.php
@@ -0,0 +1,21 @@
+<?php
+/**
+ * Adds new global settings.
+ */
+
+class RestfulSiteConfig extends DataExtension {
+	function extraStatics($class = null, $extension = null) {
+		return array(
+			'db' => array(
+				'EnableRESTAPI' => 'Boolean'
+			),
+			'defaults' => array(
+				'EnableRESTAPI' => false
+			)
+		);
+	}
+
+	function updateCMSFields(FieldList $fields) {
+		$fields->addFieldToTab('Root.Main', new CheckboxField('EnableRESTAPI', 'Enable the REST API'));
+	}
+}