Check for permissions for API

permission_check.php

<?php
add_action( 'rest_api_init', 'my_register_route' );

function my_register_route() {
    register_rest_route( 'my-route', 'my-phrase', array(
                    'methods' => 'GET',
                    'callback' => 'custom_phrase',
                    'permission_callback' => function() {
                            return current_user_can( 'edit_posts' );
                        },
                )
            );
}

function custom_phrase() {
    return rest_ensure_response( 'Hello World! This is my first REST API' );
}
?>