An API checking device 300 includes an API check request reception unit 301 to receive a determination request to request determination of whether to permit the API call, a state information acquiring unit 303 to acquire state information showing a state of the device 100, a check mode setting unit 305 to set a check mode for the API call on the basis of the state information acquired, a determining unit 307 to determine whether to permit the API call on the basis of the check mode, and a check result outputting unit 309 to output the check result generated by the determining unit 307.