secure AI server so it is not accessible for 3rd party

[sosek108]

descr. generated by Chess API via postman.

Block Access for API from 3rd Party**\n\nObjective: Restrict access to our API from third-party applications and services, ensuring that only authorized internal systems can interact with it.\n\nBackground: Our API provides sensitive data and functionality that should not be exposed to external entities. To protect our assets and maintain control over who accesses our API, we need to implement measures to block unauthorized requests from 3rd party sources.\n\nScope:\n\n* Identify all existing integrations and connections to the API\n* Classify these integrations as either internal (trusted) or external (untrusted)\n* Implement access controls to restrict API calls from untrusted sources\n* Configure IP blocking, rate limiting, or other security measures as needed\n\nDeliverables:\n\n1. A list of all blocked 3rd party IP addresses and domains\n2. An updated API configuration that restricts access to internal systems only\n3. Documentation on the implemented security measures and procedures for maintaining the blocklist\n\nAcceptance Criteria:\n\n* The API is no longer accessible from untrusted sources (verified through testing)\n* Internal systems can still interact with the API without issues\n* All deliverables are provided and meet the specified requirements\n\nPriority: High\n\nDeadline: [Insert Date]\n\nAssumptions and Dependencies:\n\n* List any dependencies or assumptions that need to be clarified before starting the task.