To improve security, an administrator can block all third-party API app access to Workspace data, but more targeted methods may be better overall.

The traditional approaches to web application security, which focus on preventing access by bots, don’t apply to API security since, by definition, all API requests are machine-to-machine.