There are various factors which can be considered, depending upon the API,is: is it for internal (within org.) or external consumption. Also what functionality it exposes, do we need to put monitisation, geolocation details, what level of security is required and so on.
