limit the servers in the serverlist in the API depending Consumers or designers

Unless you want to maintain 2 copies of the contract there is no way, today, to mask parts of the spec. 

The OAI/OAS is looking into something called overlays, but there is nothing solid published on this yet. 

If your live endpoint requires authentication, that might be a temporary “block” to consumers who do not have permission to use that endpoint.