Hi,
Is there a way to secure /federate endpoint for a Prometheus instance so that it can be accessed only by the main Prometheus server?
Yes. Run a reverse proxy in front of Prometheus and then you can
add whatever authentication or restrictions you want.