There’s a number of reasons you may want to manipulate incoming WordPress REST API requests before they begin interacting with the core application. Source