The API Security Checklist is a high-level list of best practices for APIs.

It was created by We Hack Purple and contains the following sections:

Authentication & Authorization Rate Limiting Throttling CORS Resource Quotas API Gateways Encryption Client Certificates OAuth 2
https://t.co/Xyipn32mkD