# API Standards

- Consistent JSON response envelopes
- Explicit auth requirements per endpoint
- Predictable validation error format
- Versioning strategy before external/mobile rollout