How would you approach securing an API that you have developed?

Technical