An **API leak** refers to the unintentional exposure of an application programming interface (API) or its sensitive information, such as API keys, tokens, endpoints, or data accessible through the API. This can occur through insecure configurations, code repositories, logs, error messages, or network traffic, allowing unauthorized users to gain access to protected systems or data.