Options -Indexes
# API directory - allow access but no directory listing
# Requests must be to specific PHP files only
