diff --git a/src/sammo/APIHelper.php b/src/sammo/APIHelper.php
index 36c49caf..d98f7eca 100644
--- a/src/sammo/APIHelper.php
+++ b/src/sammo/APIHelper.php
@@ -53,6 +53,9 @@ class APIHelper
 
         try {
             $obj = buildAPIExecutorClass($actionPath, $rootPath, $actionArgs);
+            if(!$obj::$allowExternalAPI){
+                Json::dieWithReason('외부에서는 호출할 수 없습니다.');
+            }
             $validateResult = $obj->validateArgs();
             if ($validateResult !== null) {
                 $logDB->insert('api_log', [
diff --git a/src/sammo/BaseAPI.php b/src/sammo/BaseAPI.php
index a605d686..f33d080e 100644
--- a/src/sammo/BaseAPI.php
+++ b/src/sammo/BaseAPI.php
@@ -11,6 +11,7 @@ abstract class BaseAPI
     const REQ_READ_ONLY = 4;
 
     static array $sensitiveArgs = [];
+    static bool $allowExternalAPI = true;
 
     public function getFilteredArgs(): array {
         $filteredArgs = $this->args;