Hi @Christoph_Souris , Please refer below article. it talks about how the API access can be restricted using communities.
Regards Vikash Sharma