DRF post method working without csrf token. Is it safe?

Question

Before working with drf, i knew that, we need to add csrf token to submit the form data.

But in django-rest-framework POST method working without csrf token.

Is it safe?

createGroup=()=>{
        let store = JSON.parse(localStorage.getItem('login'))
        var url = 'http://127.0.0.1:8000/myapi/creategroup/'
        fetch(url,{
            method:'POST',
            headers: {
                'Content-Type': 'application/json',
                'Authorization': 'Token '+store.token,
            },
            body:JSON.stringify({
                'name':this.state.groupName,
            })
        })
        .then((response)=>{
            response.json()
            document.getElementById('i').value=''
            this.setState({groupName:''})
            
        })
    }