You can disable the Dante Managed API endpoint from the DDM Appliance Menu if your security policy requires it. When it's disabled, requests to the API endpoint return 502 – Bad Gateway. You can re-enable it from the same menu at any time.
The API doesn't give anyone more access than they already have: it uses the same permissions as the DDM user whose API key or token is used. We recommend leaving it enabled, because it's used by DDM product features and third-party integrations.