api-test

Automate REST and GraphQL API testing against contracts and regressions.

13|3|Updated Mar 27, 2026
One-click install
npx skills add https://github.com/heaptracetechnology/heaptrace-skills --skill api-test-heaptracetechnology
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-test
Source: https://github.com/heaptracetechnology/heaptrace-skills/tree/main/qa/api-test
Command: npx skills add https://github.com/heaptracetechnology/heaptrace-skills --skill api-test-heaptracetechnology

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Tests API endpoints across all dimensions — correct responses, proper error codes, auth enforcement, input validation, rate limiting, and tenant isolation — to catch backend bugs before they become production incidents.

Core Features & Use Cases

  • Structured testing workflow for REST and GraphQL endpoints, including happy-path verification, error handling checks, and security validation.
  • Guidance for test data management, authorization scenarios, rate limiting, and tenant isolation to ensure robust contracts.
  • Use Case: When adding a new API, this skill helps you generate deterministic test suites that validate status codes, payload schemas, and edge cases before deployment.

Quick Start

Run the test suite against your API server to verify endpoints against the contract.

Frequently Asked Questions about api-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API tests to verify endpoints against contracts?

To automate API tests for contract verification, generate deterministic test suites that validate status codes, payload schemas, and edge cases. This skill enforces a strict test structure and clear error reporting to maintain robust REST and GraphQL contracts.

Can I test GraphQL endpoints for authentication and input validation?

Yes, you can test GraphQL endpoints for authentication and input validation. This skill supports security validation across both REST and GraphQL, verifying authorization scenarios and checking input validation to catch backend bugs early.

What is the best way to test rate limits and tenant isolation in APIs?

The best way to test rate limits and tenant isolation is to apply structured testing workflows that enforce security validation. This skill guides test data management to verify these specific constraints, ensuring robust endpoint contracts.

How do I generate deterministic API test suites for new endpoint onboarding?

To generate deterministic API test suites for new endpoints, apply a structured testing workflow that covers happy-path verification, error handling, and edge cases. This ensures maintainable tests and environment-safe execution.

Why does my regression testing miss backend authorization and validation bugs?

Regression testing misses backend bugs when it lacks comprehensive security validation. This skill enforces strict test structures covering authorization, input validation, and tenant isolation to catch regressions before production incidents.