Ronnie Mitra published a nice review of the current security protocols & standards available to you to protect your API.

Ronnie gives a good overview of what used to be available, in SOAP WS-*, what is currently available (HTTPS, OAuth and the like) and what is brewing for the future (Oz & Macaroons).