Block access to xcode bots on http

I am running Mavericks Server, with the Xcode service turned on.

I use the server to provide a regular website on port 80, using the Default Site but find that adding /xcode/ to the domain address, I can view my Xcode bots.

I do not like the idea of anyone having unauthorised access to these.

How can I turn this off?