<p>Bitcoin-core has no built-in mechanisms for restricting access to the API.</p>

<p>For your goals, you need to use a proxy between the user and the node.</p>

<p>For example, <a href="https://github.com/rsksmart/rskj/wiki/Nginx-Proxy-Server-for-JSONRPC-Calls" rel="nofollow noreferrer">https://github.com/rsksmart/rskj/wiki/Nginx-Proxy-Server-for-JSONRPC-Calls</a></p>

CC BY-SA 4.0
2019-07-15T12:31:24.783Z
2019-07-15T12:31:24.783Z
D.F.
<p>I have setup a bitcoin node and can access RPC methods via curl or bitcoin-cli.</p>

<p>Now I don't want to share the node with multiple parties and in such case, I want to restict some functions from being executed, like <code>listwallets</code>, <code>getbalance</code> etc.</p>

<p><strong>How can I restrict some method calls?</strong></p>

<p>In Ethereum we have different <code>rpcapi</code> and we can remove personal if we don't want others to play around with it unsafely.</p>

<p>My first guess will be to wrap the wallet functionalities in an application server and allow users to access the blockchain node via that application server and hence we can put any restrictions we want. Is there any better solution?</p>

<json-rpc><nodes>
How to prevent specific method calls to bitcoin node
Prashant Prabhakar Singh
# How to prevent specific method calls to bitcoin node

(Asked by: username_0 on 2019-07-15)

I have setup a bitcoin node and can access RPC methods via curl or bitcoin-cli.

Now I don't want to share the node with multiple parties and in such case, I want to restict some functions from being executed, like `listwallets`, `getbalance` etc.

**How can I restrict some method calls?**

In Ethereum we have different `rpcapi` and we can remove personal if we don't want others to play around with it unsafely.

My first guess will be to wrap the wallet functionalities in an application server and allow users to access the blockchain node via that application server and hence we can put any restrictions we want. Is there any better solution?

**Tags:** json-rpc, nodes


---

## 1 answers

### Answer by username_1 on 2019-07-15. Score: 1

Bitcoin-core has no built-in mechanisms for restricting access to the API.

For your goals, you need to use a proxy between the user and the node.

For example, <https://github.com/rsksmart/rskj/wiki/Nginx-Proxy-Server-for-JSONRPC-Calls>


---

