How can I reach my wolfram APIs from mobile app

Presumably not, though I do not have much experience with cloud deployment. What sort of security problems are you concerned about? Of course it allows anyone to make use of your API. And what the API does depends on what you’ve put into its code.

I assume you’ve reviewed http://reference.wolfram.com/language/ref/Permissions.html

Also this may be of interest: