AutoRestTest: A Tool for Automated REST API Testing Using LLMs and MARL

TL;DR

AutoRestTest is an innovative tool that combines semantic graphs, reinforcement learning, and large language models to improve REST API testing coverage and fault detection.

Contribution

It introduces a novel integration of SPDG, MARL, and LLMs for automated REST API testing, enhancing coverage and error detection capabilities.

Findings

Effective identification of operation dependencies

Improved fault detection over traditional tools

User-friendly command-line interface

Abstract

As REST APIs have become widespread in modern web services, comprehensive testing of these APIs is increasingly crucial. Because of the vast search space of operations, parameters, and parameter values, along with their dependencies and constraints, current testing tools often achieve low code coverage, resulting in suboptimal fault detection. To address this limitation, we present AutoRestTest, a novel tool that integrates the Semantic Property Dependency Graph (SPDG) with Multi-Agent Reinforcement Learning (MARL) and large language models (LLMs) for effective REST API testing. AutoRestTest determines operation-dependent parameters using the SPDG and employs five specialized agents (operation, parameter, value, dependency, and header) to identify dependencies of operations and generate operation sequences, parameter combinations, and values. Through an intuitive command-line interface, users can easily configure and monitor tests with successful operation count, unique server errors detected, and time elapsed. Upon completion, AutoRestTest generates a detailed report highlighting errors detected and operations exercised. In this paper, we introduce our tool and present preliminary findings, with a demonstration video available at https://www.youtube.com/watch?v=VVus2W8rap8.