--- a/roundup/configuration.py	Sun Nov 11 17:09:20 2018 +0000
+++ b/roundup/configuration.py	Wed Jan 30 18:11:02 2019 +0100
@@ -727,6 +727,18 @@
 are logged into roundup and open a roundup link
 from a source other than roundup (e.g. link in
 email)."""),
+        (BooleanOption, 'enable_xmlrpc', "yes",
+            """Whether to enable the XMLRPC API in the roundup web
+interface. By default the XMLRPC endpoint is the string 'xmlrpc'
+after the roundup web url configured in the 'tracker' section.
+If this variable is set to 'no', the xmlrpc path has no special meaning
+and will yield an error message."""),
+        (BooleanOption, 'enable_rest', "yes",
+            """Whether to enable the REST API in the roundup web
+interface. By default the REST endpoint is the string 'rest' plus any
+additional REST-API parameters after the roundup web url configured in
+the tracker section. If this variable is set to 'no', the rest path has
+no special meaning and will yield an error message."""),
         (CsrfSettingOption, 'csrf_enforce_token', "yes",
             """How do we deal with @csrf fields in posted forms.
 Set this to 'required' to block the post and notify