Application Programming Interface (API)

Protocols πŸ”— β€’ Secure Development βš™οΈ β€’ Web Security πŸ•ΈοΈ β€’ Sec+ Glossary πŸ“– β€’ Difficulty: premium

What is Application Programming Interface (API)?

An Application Programming Interface, or API, is a structured way for one piece of software to request data or services from another piece of software.

Examples

  • A mobile banking app uses an API to request account balances and recent transactions from the bank's servers.
  • An online store uses a payment provider API to submit card transactions securely without building the entire payment system itself.

Discover πŸ”Ž

Many modern apps and websites do not work alone. A mobile app may need account data from a server, a web dashboard may pull records from a database-backed service, and a company platform may connect to payment, mapping, or messaging services from other providers. APIs make those software-to-software conversations possible.

That is why APIs matter so much in cybersecurity. They are not just developer tools hidden in the background. They are often the paths through which sensitive data moves, important actions are triggered, and trust is enforced or broken. If an API is designed well, systems can share data safely and efficiently. If it is designed badly, attackers may find direct routes to information and functions that were never meant to be exposed.

Remember: An API is a communication interface between software systems, not a user interface for people.

Summary πŸ“

An API is a structured way for software systems to communicate and exchange data or actions. It is central to modern applications because it connects front ends, back ends, cloud services, and third-party platforms. From a security perspective, APIs are important trust boundaries that must be protected with strong authentication, authorization, input handling, and monitoring.

Open the interactive lesson Browse more topics

Tip: The interactive version includes progress tracking, decks, and premium deep dives.