是否可以禁用.NET程序集的反射?

I would like to run a third party .NET assembly on my API. I want to let it call its own methods and objects as it wishes, but deny it access to anything that my API doesn't explicitly give it. In particular, if my API passes an object to the third party code as I would like to run a third party .NET assembly