Data in tables can be played around in both xml and Json format using API's published on each table separately. 

Make sure to use active auth_token along with API call.

Same restriction like UI are there with API's e.g duplicate data can't be entered with Primary key, empty data can't be inserted for NULL fields etc.