kill-plugin-rest-api.php

<?php

// Ensure we are only looking at api requests
if ( ! defined( 'REST_REQUEST' ) ) { 
        // No API request. Bail out
        return;
}

/**
 * If the WP API is being called, we want to deactivate the Sucuri plugin.
 * This will remove the plugin only on this call. No need to alter the database. 
 */
add_action( 'option_active_plugins', function( $plugins ) { 

        // Find the Sucuri plugin array key
        $key = array_search( 'sucuri-scanner/sucuri.php', $plugins );
            
        // Remove it from the plugin list
        if ( false !== $key ) { 
                unset( $plugins[$key] );
        }   

        return $plugins;
} );