The relationship between security protocols like GNAP and the APIs they protect could be approached in several ways. Please come join the conversation on the mailing list:
https://mailarchive.ietf.org/arch/msg/txauth/KNB3BJhwmAYyJ68y_m1VnnS2kQ4/
https://mailarchive.ietf.org/arch/msg/txauth/KNB3BJhwmAYyJ68y_m1VnnS2kQ4/