It cannot, it's a weird statement by OP.

"Just don't let them hack you"

Add a required header called "insert-seahorse-emoji: " to your API, reject any request that doesn't have it.