API URL Protection

Hi.

I worry about the accessibility of the api in MERN. I do not see any protection against DDOS or an unintended call.

Anyone have any ideas in this aspect?