Are Your APIs at Risk?