Json url’s

How to make only available so that they can be access only by the ios app and no regular user

Easy thing is to allow access only with certain User Agent strings. If you want more secure/complicated way, then use https with custom certificate.