You can try configuring the setExposeRepositoryMethodsByDefault to false and check.

Sample code snippet:

@Configuration public class AppRepositoryConfig implements RepositoryRestConfigurer {

@Override
public void configureRepositoryRestConfiguration(RepositoryRestConfiguration config, CorsRegistry cors) {

    config.setExposeRepositoryMethodsByDefault(false);
}

}