Worked on enhancing security for the Donor Advised Funds API in the chariot-giving/chariot-openapi repository by implementing access control and authentication for sensitive endpoints. Focused on updating the OpenAPI Specification using YAML to introduce security definitions and enforce authorization requirements for the list and get endpoints. This approach ensures that only authenticated users can access DAF data, aligning the API with governance and compliance standards. The work included updating documentation and specifications to reflect these changes, strengthening the API’s security posture and preparing it for future audits. Emphasized API design, authentication mechanisms, and OpenAPI best practices throughout the process.