WP BackOffice

While WooCommerce’s REST Api (v2.1+) allows easy integration with your favorite 3rd party services, it also opens the doors for users to access all of your store details including:
<ul>
<li>Order Details</li>
<li>Customer Details</li>
<li>Product Information</li>
<li>Coupon Codes</li>
<li>Store Reports</li>
</ul>
WooCommerce API Lockdown allows you to restrict what is available through your API on a site wide or per user basis with an easy to use admin panel.
Usage
<ol>
<li>Once installed, in your WordPress backend navigate to to ‘WooCommerce’ -> ‘API Lockdown’</li>
<li>Select any site wide restrictions </li>
<li>Select any users specific restrictions</li>
<li>Click update that that’s it.</li>
</ol>
What Happens when a Restricted User Tries to Gain Access?
If a user tries to access a section they don’t have access to they will simply get a Authentication Error.
<a href="http://wpbackoffice.com/plugins/woocommerce-api-lockdown/" rel="nofollow ugc">Plugin’s Official Documentation and Support Page</a>

WooCommerce API Lockdown

Protect your data by restricting what is available through your WooCommerce REST API on a site wide or per user basis.

WooPOS

John

Media API for WooCommerce is an extension of <a href="http://woocommerce.github.io/woocommerce-rest-api-docs" rel="nofollow ugc">WooCommerce API</a> with new endpoint <code>media</code>(/wp-json/wc/v2/media). This is a wrapper of existing <a href="https://developer.wordpress.org/rest-api" rel="nofollow ugc">WordPress REST API</a>. This plugin will help you bypass WordPress REST API authentication settings and <a href="https://wordpress.org/plugins/jwt-authentication-for-wp-rest-api/" rel="ugc">JWT</a>, and use WooCommerce API to upload medias and images directly.
Media properties can be found <a href="https://developer.wordpress.org/rest-api/reference/media/#schema" rel="nofollow ugc">here</a>. 
Two additional properties have been added to create media file: 
media_path (string write-only): relative path folder (under wp-content/uploads) of the file to create. eg: 2018/05/department/brand. 
media_attachment (string write-only): base64 string of media binary file. eg: <code>R0lGODlhAQABAIAAAAAAAAAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==</code>.
List all media: available parameters <a href="https://developer.wordpress.org/rest-api/reference/media/#list-media" rel="nofollow ugc">here</a>
<a href="https://woopos.com" rel="nofollow ugc">WooPOS</a> (WooCommerce Point Of Sale and Inventory Management desktop app) user: please install this plugin to manage images from WooPOS.

Media API for WooCommerce

Media endpoint for WooCommerce API. Upload and list media file by WooCommerce REST API.

WooCommerce API Lockdown vs Media API for WooCommerce