What Is an API? A Simple Guide for Beginners

When you check the weather on your phone, pay with a card or log in with Google, apps are talking to each other behind the scenes. So, what is an API? It is the way they talk to each other.

If you are learning to code or test software, the question “what is an API?” comes up quickly. The jargon makes it sound harder than it is.

In this guide you will learn what an API is in plain English, how requests and responses work, the main API types, and how to make your first call.

What is an API?

An API, short for Application Programming Interface, is a contract that describes how one piece of software can ask another for data or actions. The provider decides what you can ask for and in what format; you do not need to know how it works inside. The AWS overview of APIs gives a good vendor-neutral summary.

The restaurant analogy

Think of a restaurant. You (the client) read the menu, tell the waiter (the API) what you want, and the waiter takes the order to the kitchen (the server). The kitchen prepares the food and the waiter brings it back. You never enter the kitchen, and the kitchen only accepts orders from the menu.

How an API works: request and response

1. The client (your app) sends a request to a URL called an endpoint.
2. The request includes a method, headers and sometimes a body with data.
3. The server checks the request, runs the logic and talks to a database if needed.
4. The server sends back a response with a status code and usually JSON data.

Here is a simple response from a “get user” endpoint:

{
  "id": 1,
  "name": "Asha Patel",
  "email": "asha@example.com",
  "active": true
}

Types of APIs

Beginners should start with REST. Read our REST API best practices guide when you are ready to design your own.

HTTP methods and status codes

MDN lists every code in its HTTP status reference.

Try an API yourself

The free JSONPlaceholder service provides fake data for practice. Open this link in a browser to make a GET request: https://jsonplaceholder.typicode.com/users/1.

With curl

curl https://jsonplaceholder.typicode.com/users/1

With JavaScript

const res = await fetch('https://jsonplaceholder.typicode.com/users/1');
const user = await res.json();
console.log(res.status, user.name);

With Python

import requests

res = requests.get("https://jsonplaceholder.typicode.com/users/1")
print(res.status_code, res.json()["name"])

To create data, send a POST request with a JSON body:

curl -X POST https://jsonplaceholder.typicode.com/posts \
  -H "Content-Type: application/json" \
  -d '{"title":"Hello","body":"My first API call","userId":1}'

API keys and security basics

Many APIs require authentication so the provider knows who is calling. Common methods are API keys, bearer tokens and OAuth. Keep these simple rules in mind:

• Never put secret keys in front-end code or public repositories.
• Store keys in environment variables or a secrets manager.
• Always use HTTPS.
• Respect rate limits to avoid being blocked.
• Give each key only the permissions it needs.

Using Python? Our Python tutorial for beginners covers the basics you need for the example above.

Final thoughts

So, what is an API? It is a clear, agreed way for software to ask other software for something. Once you understand requests, responses, methods and status codes, most web APIs feel familiar. Make a GET request to the practice API today, then try a POST, and you will have the core skill that developers and testers use every day.

Frequently asked questions

Keep learning