Q. Can I limit the connection sources for using DPF-API?

No, you can't.

If the token of the IIJ ID you are using is leaked, change it to a new token promptly.