How do I stop users spamming my API?

https://website.com/version-test/api/1.1/obj I got this to work, which was great! But how do I stop others from using it if they are not on my website? Or how can I limit the amount of times it can be run?

Choose carefully which tables you enable in your Data API and create strong Privacy Rules.

You can implement rate limiting