Built-in Addons:

WP REST API Control

WP REST API Control addon adds some control over WP REST API. You can force SSL for REST calls, and you can disable the REST API, or disable some of the endpoints (users and settings).

WP Rest API Control
WP Rest API Control