Address API9:2023 Improper Inventory Management + API10:2023 Unsafe Consumption of APIs per OWASP API Security Top 10 2023. Improper Inventory Management occurs when APIs are deployed without proper documentation + version control + decommissioning leading to shadow APIs + zombie APIs + improperly retired endpoints. Unsafe Consumption of APIs occurs when an application consumes external APIs without proper validation + sanitisation + trust assessment of received data exposing to supply chain attacks. Mitigations include (a) maintain API inventory + lifecycle management + retirement procedures + (b) maintain documentation + OpenAPI specifications + (c) implement API gateway + observability, (d) validate consumed external API responses + treat as untrusted input, (e) maintain monitoring for shadow + zombie APIs + (f) implement strict validation + sanitisation + isolation when consuming external data. Dependency and Supply Chain Security (OWASP-API-PRG-06) must (a) maintain dependency inventory + SBOM + (b) scan dependencies for vulnerabilities + license issues + (c) verify package provenance + signing + (d) coordinate with broader supply chain security programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.