1) Web API Design Will become a Premium Tech Skill:
One of the requests we’ve consistently heard in 2014 is for design help with APIs. But, while there are great resources out there (for example see A Practical Approach to API Design) and we know of more on the way, experience still counts for a great deal and API Design is likely to show up more frequently in job recs across many industries. We also expect there to be a significant new market for API Design courses, workshops and materials. Hopefully this will lead to more best practices and an evolution of what it means for an API to be “great”.

2) API Search and Discovery Will Heat Up:
As the number of APIs increases, it has become hard to find what’s out there – directories and search will become increasingly important. While in many cases people need to answer the question “does company X have an API”, it’s also becoming more important to find all the components of the API – Where can I sign up? Do they have machine readable descriptions? Pricing? We’re hoping for more use of machine readable meta-data formats like JSON (or any alternatives) to publicize APIs and strong growth for API discovery services like ProgrammableWeb, Mashape, APIs.IO or new ones which come along.

3) Automated Code Gen and SDKs will Raise the Bar:
Love or hate SDKs, automation of integration and code generation have now reached the point where resulting code can be genuinely useful. As such, we expect code generation with descriptions such as Swagger or 3rd party tools such as APIMatic and RestUnited to help more APIs do what leading APIs do and add code for developers to get started more quickly.

4) Security Breaches will be Top of Mind:
With multiple high profile Internet security breaches in 2014 (not least Sony in December), risks to online systems are clearly climbing and APIs will need better protection. Along with all their utility, unfortunately if done wrong, APIs can also act as a potential new attack vector through which mass amounts of data could leak. Unfortunately this may lead to one or more serious breaches throughout the year and certainly an increase in attempts and threats.

5) API Operations will Become “A Thing”:
Building on the previous point and challenges we see articulated by 3scale customers, technical operations for running APIs will become more critical. Ops teams will begin seeing APIs as a first class entity alongside Web and other properties. Needs will run from testing, monitoring, security, alerts, troubleshooting, scaling and general management. (For some related theory, see API Operations and Donuts for one of the few pieces on this from 2014.)

6) Industry Standards or Shared Specifications will Start Getting Early Traction:
The increasing proliferation of APIs for similar services with different interfaces is a challenge for everybody. Hopefully the increasing adoption of service description formats, and common patterns such as Hypermedia frameworks, will lead to more sharing of designs and collaboration. This is beginning to happen in some areas such as civic APIs (CitySDK), but the opportunity is much broader than this. Changes here are likely to be fledgling and sectorial, but the opportunity for shared/public definitions is great. At the other end of the spectrum, industry giants such as Google and Apple are releasing new APIs like HealthKit and Google Fit which may provide defacto rallying points for API Designs in certain sectors (if they are opened up for genuine re-use).

7) The API Event Scene will Grow:
2014 saw a mushrooming of API events and those events go from strength to strength. We expect this trend to continue, but also broaden with some events trending larger and others reaching new geographies (check out APIDays Sydney in February) as well as becoming sector specific – Papis showed the way in this respect. Event fatigue may kick in, but hopefully some of the events will be closer to where people need them and deep dive into the right topics.

8) Realtime and Post Rest APIs:
Realtime APIs will continue to proliferate and it will be an interesting year in APIs that deviate from REST patterns. At scale we’ll likely see more companies adding device centric calls or compiling call results for efficiency on mobile. This does not mean “REST is Dead”, simply that there is pragmatic evolution for new API use cases.

9) IoT will Stretch API Architectures:
Internet of Things applications are quickly coming to many consumer products and industrial use cases. APIs are almost always part of the equation. This “APIs on board” trend will lead to interesting challenges for evented systems, web hooks and technical solutions since IoT APIs need to function with no general access to the public Internet. In many ways, IoT use cases such as “in home” networks sit half-way between the original notion of software component / operating system APIs (for which one had to be on the local device to call methods) and public web APIs (which can be called from anywhere). IoT APIs often inhabit partial connectivity or local only networks but not be limited to one device.

10) Identity, Privacy and Data Access will be Key:
APIs are becoming a means to unify content and functionality delivery across devices. It will become more critical to think carefully about user and app identity in order to both create great experiences and to safeguard security / privacy. Efforts like UMA will be interesting to watch. oAuth adoption will grow but it will remain challenging for organizations to create unified user / identity management across devices. The API programs and policies of the major Internet Companies such as Google, Amazon, Facebook, Twitter and others will remain in the spotlight from a data autonomy, privacy and access perspective. We expect movements to continue to try to create decentralized, indie-web style solutions that separate out data and functionality from silos, but it’s hard to predict how large players will open up in response.