Is there a way to get all available field via the rest api for a content type?

You can get all structure of data from a content type calling the follow path in your request:

/api/content-type-builder/content-types/:id

Content Type Vehicle Exemple:

/api/content-type-builder/content-types/api::vehicle.vehicle

Take a look on USERS & PERMISSIONS PLUGIN to avoid the forbidden responses