Under the BuddyBoss dashboard - Settings - General - Privacy, there are new options for you - "Restrict REST API access to only logged-in members"...