Access to the API can be managed using several security settings:
Enabling user authentication
Setting up a HTTPS connection
Setting up CORS