Verification of interfaces for functionality, performance and security independent of the user interface.
API testing verifies functional, non-functional and security aspects of interfaces independently from the user interface. It includes automated contract, integration and load tests plus dependency mocking. The aim is early defect detection, more stable integrations and faster feedback loops in CI/CD pipelines and measurable API quality indicators.
Proportion of API endpoints and paths covered by automated tests.
Average time until detection of an integration defect.
Share of test runs that are not deterministically repeatable.
In a payment service, consumer contracts automatically validate interfaces before deployment.
External API is regularly verified by performance tests and OWASP scans.
Schema tests and end-to-end calls validate data flows through the gateway.
Centralize specification (OpenAPI/GraphQL schema).
Identify contracts and create automated contract tests.
Integrate load and security tests into dedicated pipelines.
Integrate results into observability tooling and dashboards.