[keycloak-user] mobile security

I need to create a mobile application that consumes services from a keycloak protected services, users don't create an account, but I don't want people outside the app to consume the services. How can I send the token authenticate on the mobile app the same way I authenticate on websites. meaning having a keycloak.json key or something Any thoughts?