REST API

Do you have cloud REST API’s to control the devices using some access token obtained via oAuth or so?

No.

So we wont be able to control the devices remotely right. It can be be controlled with in the same wifi network. Is my understanding correct?

Yes, it supported controlling in local network, you can find API document from https://www.yeelight.com/en_US/developer.