Got it. Disabling the backend API will be very easily possible in our next release of the node SDK (coming out this week).. Once it's out, I can give you instructions on how to do that.
For frontend, you will want to override the login UI to disable sign up. To do that, follow the steps in this file.