I am using Tileserver-GL for rendering vector tiles to web and mobile. For web, I am using Mapbox JS API GL and for Mobile, I am using Mapbox android SDK. Currently, I am using flat URL given by Tileserver-GL like
or for mobile use
but as you can see this URL is open and anyone can access it.
Since we are not using Mapbox Access Token, how can we protect our Url from public to abuse?