A trust evaluation may be obtained for a network element in a communication network. Based on this trust evaluation, one or more services may be invoked to address the risk that a potentially untrustworthy network element poses in the communication network. Application programming interfaces (APIs) may automate the invocation of trust-controlled services, such as a traffic mirroring service for a network element, a traffic monitoring service for a network element, a traffic examination service for traffic associated with a network element, a traffic blocking service for traffic associated with a network element, a traffic storage service for traffic associated with a network element, a traffic logging service for traffic associated with a network element, an endpoint resource selection service for traffic associated with a network element, a midpoint selection service for traffic associated with a network element, a tunneling service for traffic associated with a network element, and/or an application management service for a network element. An API for a trust-controlled service may be used to directly perform a function on one or more resources in the communication network or may be used to set up an ongoing function on one or more resources in the communication network that may continue until the API is used to terminate the function.