NodeJS - Securing API calls

Hello Wapplers,

I have several API calls which can be called outside of a web server with some scripts/Postman/etc.
Question is: How can I apply some security/restrictions for such API calls?
Idea is to use some password/passphrase in scripts as a security.