APIs require more than database access, security, and nice routes. Those are all necessary but a good API also includes flows linking things together so you can

APIs require more than database access, security, and nice routes. Those are all necessary but a good API also includes flows linking things together so you can progress through higher order processes and workflows. You need to make sure that you're actually providing user value. CRUD over HTTP (or an "access API") should be a first step, not your end goal.