Ist ein Theme-Komponente oder Plugin am besten für externe API-Aufrufe?

You might get away with a User Field which are exposed on the API.

If not, you’ll need a plugin.

But you’ll need to work out who can see what.

If this is confidential to the User or it’s ok for others to see it etc.

See:

2 „Gefällt mir“