as I can hide the path and url

I'm having a little trouble understanding what you are asking for.
What url path are you wanting to block? A call to an API? A link to a private Roku channel?
Can you clarify?

It is that the app I have api searches for information to display but some manage to get the information program is what I do to protect api

I recommend implementing a token system on your api server to protect your feeds.
have your application generate a md5 hash that matches your server hash and pass it along in the post to your api.
That's the most secure way.

and as I could do