In the developer docs I've found the option to unrestrict API access. Is there an option to restrict access to the API for everything i.e. nothing is anonymous? Or is there a way to disable the magento API?
Maybe I misunderstand but seems like bots can spam your API endpoint to retrieve a lot of information.
Am I correct in saying that Magento 1 doesn't allow anonymous access?