Risk assessment based data access

A method, comprising:

• determining security risks for each of a plurality of executable applications accessing an application programming interface based on a live risk assessment of one or more third parties associated with the plurality of executable applications, wherein the security risks are determined based at least in part on which onboarding steps for the application programming interface have been taken with regard to the plurality of executable applications, the onboarding steps comprising one or more of submissions by the one or more third parties associated with the plurality of executable applications, registration steps, training steps, and interactions with a sandbox environment for the application programming interface;
• monitoring changes in the security risks for each of the plurality of executable applications, the security risks determined in response to live monitoring third-party computer readable data sources for information associated with the plurality of executable applications and the one or more third parties associated with the plurality of executable applications;
• and
• dynamically adjusting a scope of permissions for the plurality of executable applications with regard to the application programming interface based on the monitored changes in the security risks.

An apparatus, comprising:

• means for determining security risks for each of a plurality of executable applications accessing an application programming interface based on a live risk assessment of one or more third parties associated with the plurality of executable applications, wherein the security risks are determined based at least in part on which onboarding steps for the application programming interface have been taken with regard to the plurality of executable applications, the onboarding steps comprising one or more of submissions by the one or more third parties associated with the plurality of executable applications, registration steps, training steps, and interactions with a sandbox environment for the application programming interface;
• means for monitoring changes in the security risks for each of the plurality of executable applications, the security risks determined in response to live monitoring third-party computer readable data sources for information associated with the plurality of executable applications and the one or more third parties associated with the plurality of executable applications;
• and
• means for dynamically adjusting a scope of permissions for the plurality of executable applications with regard to the application programming interface based on the monitored changes in the security risks.