Although the API itself creates no new access privileges beyond what DDM users currently have, if necessary for security policy reasons the API endpoint can be disabled in the DDM Administration Menu.
We recommend against doing this; as in the near future we plan to use the API for core product features as well as end-user integrations. If disabled, the API endpoint can be re-enabled when needed in the Appliance Menu.