API endpoint testing