You are looking at the HTML representation of the XML format.
HTML is good for debugging, but is unsuitable for application use.
Specify the format parameter to change the output format.
To see the non HTML representation of the XML format, set format=xml.
See the complete documentation, or API help for more information. 
<?xml version="1.0"?>
<api>
  <help>
    <module>* action=protect *
  Change the protection level of a page

This module requires read rights
This module requires write rights
This module only accepts POST requests
Parameters:
  title               - Title of the page you want to (un)protect. Cannot be used together with pageid
  pageid              - ID of the page you want to (un)protect. Cannot be used together with title
  token               - A protect token previously retrieved through prop=info
                        This parameter is required
  protections         - List of protection levels, formatted action=group (e.g. edit=sysop)
                        This parameter is required
                        Separate values with '|'
                        Maximum number of values 50 (500 for bots)
  expiry              - Expiry timestamps. If only one timestamp is set, it'll be used for all protections.
                        Use 'infinite', 'indefinite' or 'never', for a neverexpiring protection.
                        Separate values with '|'
                        Maximum number of values 50 (500 for bots)
                        Default: infinite
  reason              - Reason for (un)protecting
                        Default: 
  cascade             - Enable cascading protection (i.e. protect pages included in this page)
                        Ignored if not all protection levels are 'sysop' or 'protect'
  watch               - DEPRECATED! If set, add the page being (un)protected to your watchlist
  watchlist           - Unconditionally add or remove the page from your watchlist, use preferences or do not change watch
                        One value: watch, unwatch, preferences, nochange
                        Default: preferences
Examples:
  api.php?action=protect&title=Main%20Page&token=123ABC&protections=edit=sysop|move=sysop&cascade=&expiry=20070901163000|never
  api.php?action=protect&title=Main%20Page&token=123ABC&protections=edit=all|move=all&reason=Lifting%20restrictions
Help page:
  https://www.mediawiki.org/wiki/API:Protect
</module>
  </help>
</api>