What is the order in which API request restrictions are applied?

When responding to content from a particular topic group, the priority for API request restrictions is as follows.

Priority of browsing restrictions

1. "IP address restriction" in [API] -> [Security]

2. "API request restriction" in [API] -> [Endpoint settings]

3. "API request restriction" in Content structure editor

4. "API request restriction" in Content category

5. "API request restriction" in Content