Methods, systems, and computer-readable media for granting application permissions and providing notifications of API activity are provided. An example method may include processing a request to install an application that requires API calls by the application. The method may further include determining an authoring entity of the application, and determining whether the authoring entity is certified by one or more trusted entities. In addition, the method may include allowing an installation of the application when the authoring entity is certified by at least one trusted entity. An example system may include instructions that, when executed by the one or more processors, cause the one or more processors to process a request to install an application that requires access to one or more APIs, determine a sensitivity level of each of the required APIs, and when the determined sensitivity level of at least one API of the required APIs is associated with a restricted API classification, require that code of the application be delivered using a secure mechanism.