roadmap.sh: API Design
A free, interactive visual roadmap of what it takes to design and work with APIs: HTTP basics, REST and other styles, authentication, security, rate limiting, documentation and more. Useful for checking which API concepts you have not met yet, whether you build APIs or connect to them.
Roadmap
Web Development
roadmap.sh
Self paced
All
Free
What it is
roadmap.sh is a community-driven site of visual learning paths, and its API Design roadmap maps the concepts behind building robust APIs. It starts from what an API is and the main styles, such as REST, GraphQL and SOAP, then moves through HTTP fundamentals, design standards, authentication and authorisation, security, rate limiting, caching, documentation and architecture patterns. Each node on the map opens a short explanation with links to further reading.
Who it is for
Backend developers are the obvious audience, but it is just as useful to people who spend their time calling APIs: integration and automation builders, frontend developers and anyone connecting client systems. Knowing how APIs are meant to be designed tells you what to look for in documentation, from pagination styles to authentication flows and error formats.
How to use it
Do not try to learn every node in order. Use it as a checklist:
- Mark the concepts you already understand.
- Pick the ones that keep appearing in the API docs you work with, such as OAuth, pagination or rate limiting, and study those first.
- Come back to it when you meet an unfamiliar term.
The site lets you track progress if you sign in, which is free.
Is it worth it?
As a map, yes. It shows the shape of the subject in one view, which helps you see gaps and plan study. It is not a course: explanations are short, and depth comes from the linked resources and from practice, such as calling real APIs in Postman. Its text is written by the roadmap.sh community, and the project is open source on GitHub.
Time needed
There is no fixed duration. Skimming the whole map takes under an hour. Working through the parts relevant to integration work, such as HTTP, authentication, rate limiting and webhooks, is a few weeks alongside practice.
Common questions
Do I need this if I only use no-code tools? You do not need all of it, but the HTTP, authentication and rate limiting parts explain most of the errors no-code tools show.
Is it the same as the backend roadmap? No. The backend roadmap covers databases, servers and much more; this one focuses only on APIs.
Is it free? Yes. roadmap.sh offers some paid extras, but the roadmaps themselves are free.
Ready to start?
Opens on roadmap.sh in a new tab.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
Follow along
New writing, resources and project ideas land here first.