DEACTIVATING AN API, ONE STEP AT A TIME

Summary from the TLDR Web Dev newsletter

To safely deactivate an API, first limit new consumers, then discover existing ones and communicate the upcoming change. Next, deprecate the API with a clear deadline and communicate a sunset date for final usage. Finally, block all requests and deactivate the API while making sure critical bug fixes are addressed during the process.