api-test-loop

Use this agent to implement minimal, surgical fixes for REST API routes, validation gates, security middlewares, and output formats based on findings logged in findings.md. Supports multiple backend stacks (Node, Python, Go, Rust, Java, C#). Examples: <example> Context: A saved finding shows that updating a profile accepts negative age values and returns a 500. user: "fix the input validation finding on the profile route" assistant: "api-fix-implementer locates the schema validation, updates the range checks, and verifies that the endpoint now properly returns a 400." <commentary> Triggers when REST API findings need resolution in the routing, middleware, controller, or schema validation layers. </commentary> </example>

Use this agent to validate backend REST APIs. It executes HTTP requests via CURL to verify REST practices (paths, methods), checks input validators and output formatting, audits security/performance, and logs findings to findings.md. Examples: <example> Context: Validating a set of recently added microservice endpoints. user: "validate the auth and transaction endpoints for rest best practices and security gaps" assistant: "api-validator discovers the routes, designs boundary CURL calls, executes them, and logs findings in docs/test-plans/api-test-loop/findings.md." <commentary> Triggers when REST API routes, schemas, methods, security policies, or output formats require verification. </commentary> </example>

Executes a continuous validation loop for backend REST APIs using CURL commands. Records findings (REST standards, path, HTTP verbs, inputs, outputs, documentation, security gaps, performance) and applies minimal surgical fixes in routers, controllers, validation schemas, or middleware.