Tootfinder

Hot take: A REST API does not have "endpoints." It has one start point, and then links.
"Endpoints" are what RPC-style APIs use, where each distinct URL is essentially a distinct function call.
That's a fine way to design an API. You're not wrong for doing it. But it's not a REST API. It's RPC, even if it's using HTTP verbs and error codes.
Terms matter.

SATORI: Static Test Oracle Generation for REST APIs
Juan C. Alonso, Alberto Martin-Lopez, Sergio Segura, Gabriele Bavota, Antonio Ruiz-Cort\'es
https://arxiv.org/abs/2508.16318

SATORI: Static Test Oracle Generation for REST APIs
REST API test case generation tools are evolving rapidly, with growing capabilities for the automated generation of complex tests. However, despite their strengths in test data generation, these tools are constrained by the types of test oracles they support, often limited to crashes, regressions, and noncompliance with API specifications or design standards. This paper introduces SATORI (Static API Test ORacle Inference), a black-box approach for generating test oracles for REST APIs by analyz…

Wow, great new bug report interface for @….
I hope that helps to get prioritizing the bug reports more easily for @… and the team

Hard agree, re building APIs
https://mastodon.social/@raiderrobert/115196876811033350

Combining TSL and LLM to Automate REST API Testing: A Comparative Study
Thiago Barradas, Aline Paes, V\^ania de Oliveira Neves
https://arxiv.org/abs/2509.05540 https://

Combining TSL and LLM to Automate REST API Testing: A Comparative Study
The effective execution of tests for REST APIs remains a considerable challenge for development teams, driven by the inherent complexity of distributed systems, the multitude of possible scenarios, and the limited time available for test design. Exhaustive testing of all input combinations is impractical, often resulting in undetected failures, high manual effort, and limited test coverage. To address these issues, we introduce RestTSLLM, an approach that uses Test Specification Language (TSL) …

WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing
Omur Sahin, Man Zhang, Andrea Arcuri
https://arxiv.org/abs/2509.01612 https:/…

WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing
Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the last few years. However, there are three major issues that hinder further progress: how to deal with API authentication; how to catalog and compare different fault types found by different fuzzers; and what to use as case study to facilitate fair comparisons among fuzzers. To address these important challenges, we prese…