DataQuad interview question

How can we secure the API's ?