The security of API from AlchemyJ is divided into three stages. The first stage is the authentication. AlchemyJ API supports various authentication, such as LDAP. The second stage is access control. AlchemyJ API checks the role and group of authenticated users and determines if the API access is allowed. The third stage is session management, for instance, AlchemyJ manages encrypted information exchanges between API servers and clients, as well as a session timeout.