It is a service within the League client, runs locally, contains practically all non-RP store related functions and data the client has access to and is horribly unprotected for just how powerful it is.
It's not an oversight, this API (LCU API) is basically the backbone of the League client and has been around since the client update.
