The MediaWiki API is the programmatic interface used by Wikimedia sites and other MediaWiki-based platforms to read pages, search content, and perform actions such as creating or editing pages. Instead of using the browser UI, trusted clients send structured requests to endpoints that handle queries, logins, and write operations.
It matters in cyber security because write-capable API calls are privileged and usually protected by authentication, tokens, and rate limits. In real attacks, adversaries may abuse valid credentials, automate large volumes of requests, or probe for weakly protected endpoints to change content or stress infrastructure. Defenders monitor API logs for abnormal patterns such as repeated failed edits, unusual user agents, and bursts of automation, then block or throttle suspicious clients. Strong token checks and separate read-only versus write workflows help reduce the risk of unauthorized changes.