What are the best practices to secure meteor app api?

have you any device to secure meteor react api ??