Manual:$wgDebugAPI

Details
When true, some security-related restrictions are loosened.

For example POST-only requests can now be made as GET.

ApiBase::dieWithErrorOrDebug will only set a warning instead of failing.

An extra warning header will be added in the response if enabled.