Manual:$wgDebugAPI

Details
When true, some security-related restrictions are loosened.

For example POST-only requests can now be made as GET, and ApiBase::dieWithErrorOrDebug will only set a warning instead of failing.

An extra warning header will be added in the response if enabled.