A ghost API is an API exposed by a third-party library, infrastructure component, or other system rather than deliberately created and managed by the organization. section 3.7
Ghost APIs are part of API sprawl: undocumented or poorly tracked interfaces that can remain outside normal security assessment. When attackers discover less-protected APIs, data breaches can result. section 3.5 section 3.7
Finding an undocumented interface
An API observability tool can inspect which requests API servers accept and reveal undocumented attack surfaces. Add discovered interfaces to an API catalog, assess their security, and apply the same validation standards used for other APIs. section 3.7
