An interface management method includes obtaining interface call records of a plurality of microservices in an application, where the interface call records include an interface call provided inside the application by the microservice and/or an interface call provided outside the application by the microservice; drawing an interface call relationship diagram of the application in a running state based on the interface call records of the plurality of microservices; drawing a boundary of the application in the interface call relationship diagram based on microservice registration information of the application; and when there is an interface call that breaks through the boundary of the application in the interface call records, displaying, to a user, an interface call that has a security risk, for example, the interface call that breaks through the boundary of the application.