Hi and welcome to the forum! To answer the question in the title of this topic, you can’t use free hosting for API hosting.
To prevent this kind of usage, we have a security system that works in the way described by this article: