What are the things to take care while creating third party API?

I am creating API which will use as third party api. I'm little bit confuse need your helps guys.

Query's :

What will be the authentication flow ?

How to Secure token ?

How to Handle the Error?

How to Make API secure that Data will not Leak?

And other things which needs to be take care.

Please Help.....