Assuming you're talking about the REST API, that is just another interface. After unwrapping the request the processing of the call is the same as when you call a service from Composer or a Mashup, so it passes the application layer and does not go directly to the database.
