Access control settings on the Hardening tab (screenshot)
On the Hardening tab you can manage multiple access control features that block access to sensitive website data, prevent user enumeration, disable user detail exposure, restrict access to WordPress REST API, and other WordPress data interfaces that are vulnerable to bad actors and data scraping bots. To monitor the usage of REST API, use the links at the bottom of the page.