The Pega API is maintained through the service package API. I think there is no OOTB feature to disable the services within the service package. Instead you can maintain the authentication on this service package. The supported authentication mechanisms are basic, custom, Oauth.
if you don't want anyone else is able to access your services, then you need to update the SOAP Service Associated package with authentication then only the Authenticated users will be able to make right calls.