Setting up API access for WordPress installation
Checking permissions is important if you want the API to respect the access rights you have given to users? If in your setting and requirement it is not important that you can protect the country and state data you could skip the permission check. Are you using the API on the same server or with REST?