Bubble API domain restriction

Would anyone know if its possible to restrict access to a bubble API call to a specific domain. ive got mine secured with token/key and privacy setting but just seeing if there another level of security/control