Prototype for api spec

For bikeshedding purpose.
The goal is to discuss a standard for API definition that contains details on how to secure said API. I took Mozilla Investigator as example: https://github.com/mozilla/mig/blob/master/doc/api.rst