...APIs can assume the boring stuff (access control, rate limiting, analytics, etc.) is already taken care if the API is being accessed, so common functionality doesn't need to be implemented in the API code. API Umbrella acts as a layer above your APIs, so your API code doesn't need to be modified to take advantage of the features provided.