api-validation

name	api-validation
description	Comprehensive API endpoint validation including schema validation, authentication testing, and error handling

API Validation Skill

Thorough validation of API endpoints including schema compliance, authentication, authorization, error handling, and performance.

When to Use

• Validating new API endpoints
• Testing API changes
• Schema compliance verification
• Authentication/authorization testing
• API contract validation
• Performance baseline checks

Capabilities

1. Schema validation - Verify responses match expected structure
2. Authentication testing - Test auth flows and token handling
3. Authorization testing - Verify permission enforcement
4. Error handling - Validate error responses and messages
5. Performance testing - Check response times and limits

Workflow

Phase 1: Discovery

Understand the API:

• Review documentation (OpenAPI, Swagger, README)
• Identify endpoints to validate
• Note authentication requirements
• Document expected responses

Phase 2: Test Design

Create comprehensive test cases:

For Each Endpoint:

• Success scenarios (valid requests)
• Authentication tests (valid/invalid/missing token)
• Authorization tests (permitted/forbidden actions)
• Validation tests (required fields, formats, types)
• Error scenarios (not found, server errors)

Phase 3: Execution

Run tests systematically:

1. Test authentication first
2. Test each endpoint method