It's important when builidng an API Server to have key security principles in mind. The service that powers your system ought to be secure.

Learn the core concepts of security as they relate to API Servers. Walk away with knowledge about encryption at rest and in transit, authn, authz, and auditing, and techniques for managing access.