Don't make direct request to the discord bot api from frontend. Make a /fetch route and make the request to discord bot api in the backend whenever /fetch is called and return the response of bot api in the /fetch response.

This way your bot token will not be leaked in any part of the frontend(which is the only part visible to the users).