/ qa & testing

API testing

Postman / Newman collections, contract tests (Pact), schema validation. Coverage for rate limiting, authentication and idempotency.

API tests are the cheapest and most reliable layer of the test pyramid — faster than e2e, safer than units, close enough to production behavior to catch real issues. We write them as OpenAPI contract tests, which means the spec and the tests never drift. When a developer changes the API, the contract test immediately shows which consumers will break.

What we deliver

  • Postman collections or Newman scripts for smoke and regression runs
  • Contract tests with Pact — provider and consumer tests
  • Schema validation (JSON Schema, OpenAPI) on every test response
  • Coverage for rate limit (429), authentication and idempotency
  • Mocking layer (Prism, Mockoon) for testing against the spec
  • CI integration with a retry strategy for flaky tests

When to call us

  • The API has 50+ endpoints and has never been tested systematically
  • A mobile app or partner system breaks regularly
  • You need a contract test setup between teams
  • The API changes often and nobody knows who is impacted

How we work

Audit of existing APIs and the spec → core Postman collection for smoke tests → contract tests for critical integrations → CI integration → continuous test addition for new endpoints.

Tech stack

  • Postman
  • Newman
  • Pact
  • Prism
  • OpenAPI
  • JSON Schema

Frequently asked questions

Karate is great for Java/Kotlin teams with a BDD bent. RestAssured for pure-Java teams. Our default is Postman/Newman because teams already understand it, plus Pact for contract tests.

Got a complex software challenge?

We specialize in projects other agencies turn down. Send a brief — we reply within 24 hours.