In the new software stack, the API surface is not a fixed set of endpoints but a negotiation protocol that adapts to the capabilities and permissions of whoever (or whatever) is calling.