You can disable various APIs such as getnewaddress using the rpcallowmethod runtime parameter. However you cannot prevent someone who has control over their own system from changing this parameter, and then creating new addresses freely. Creating a new address is a completely local event that does not require approval from, or notifying of the blockchain.
