I've always thought that elements of the terrorist infrastructure -- plots, operatives, muscle, money, connections -- are sort of cloud-provided and available to pretty much anybody capable of implementing the API. Al Quaeda is sort of the 37 Signals of terror: they aren't the central nexus, they're a media-savvy early adopter whose core competence is marketing and have a happy little Italian restaurant-scale kill-the-Jews-and-Crusaders business, and they inspire people all over the globe to quit the day jobs, try a little lean jihad, iterate rapidly, and blog about the whole process.
Sadly the I in API does not stand for Interface and we are totally unwilling to discuss what it does stand for so War on Terror it is.