API Design and Build

Hi guys, So I'm a security engineer who's relatively new to designing and building APIs. I wanted to ensure I'm designing and building while incorporating best practices. So I would like to ask what are some best practices to consider when designing and building APIs (Not security best practises btw)