API discovery is the process of systematically searching through network communication or scanning of the code to find all APIs currently in use or publicly available. Discovery is essential to API security since you can’t protect what you can’t see. Discovery generally results in an API Catalogue that lists all APIs and their various attributes.