Yes, you can put server only methods in imports/api/lists/server/methods.js and these methods will only be available on the server. See Building multiple apps from the same source
Also, put your publications in imports/api/lists/server/publications.js as they are server side only as well.