> For the complete documentation index, see [llms.txt](https://the-pentesting-guide.marmeus.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://the-pentesting-guide.marmeus.com/web-owasp-test-cases/4.12-api-testing.md).

# 4.12 API Testing

## [API Testing](https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/12-API_Testing/README)

## 4.12.1 [Testing GraphQL](https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/12-API_Testing/01-Testing_GraphQL)

* [ ] Assess that a secure and production-ready configuration is deployed.
* [ ] Validate all input fields against generic attacks.
* [ ] Ensure that proper access controls are applied.

**Evidence**:

```
```