Hi Andi Putra Ogie
Welcome to API Connect development!
The warning "Empty root level API security is not a secure practice" occurs because your API definition includes a security section at the root level that is empty or has no security schemes enabled.
To resolve this:
Trying to save the API with an empty or empty-object security section will cause this warning. Adjusting the security section as described will help you fix the issue.
If you want, please share your API spec snippet and a screenshot of security section, and I'll be happy to help you further.
Hope this helps!
------------------------------
Mounika Nayikoti
------------------------------