A user is seeing all user's contacts through API

There is set records view as “Owner Only” and from portal it is working fine but from api calling it is returning all records.

Hi @subhankar.maiti, API requests using API key or OAuth do not take into account user visibility permissions. This behavior is to be expected.