How to protect the APIs of Server URL and Application ID

How to protect the APIs of Server URL and Application ID so that they can only be used from the domain of my website

You can not do that now.