Using a rest api to provision on an external server. Is it safe?

[Joshb_]

I am creating a custom module that handles custom requests to my hosting server. However, how should I be going about this?

I was thinking about using a rest api with authentication via OTP or tokens, not sure yet, to create accounts  and add custom website files and all that.

Is that the way to do it?

Kinda new to networking structuring

Thanks!

Josh