anyway that I can cancel the header kbn-xsrf verify in POST method? I am adding some api in my own plugin, and its nothing about kibana, so I want there is no necessary to check kbn-xsrf header
You could add the following in your config:
server.xsrf.disableProtection: true
Note that this is not recommended for production because it leaves your application open to XSRF attacks.