Preprint

RESTCov: A Tool for Structural Coverage Analysis of REST APIs

Tolgahan Bardakci Serge Demeyer

Aug 2026 · 0 citations · 20 references

Computer Science

TL;DR

RESTCov is a lightweight tool that computes structural REST API coverage from an OpenAPI specification and observed HTTP request/response logs, reporting coverage across paths, operations, parameters, media types, status codes, and status classes.

Abstract

REST APIs are widely used in modern software systems, but developers and testers often lack visibility into which parts of an API specification are exercised by a test suite. Traditional coverage analysis usually relies on source-code instrumentation, which is impractical for REST APIs that are distributed, externally maintained, and hence accessible only through black-box execution. This paper presents RESTCov, a lightweight tool that computes structural REST API coverage from an OpenAPI specification and observed HTTP request/response logs, reporting coverage across paths, operations, parameters, media types, status codes, and status classes. RESTCov produces both machine-readable results and a human-readable HTML report, helping users inspect coverage gaps, diagnose specification-log mismatches, and evaluate REST API test suites without requiring access to the implementation. Screencast: https://youtu.be/mNz2P43OyUc Repository: https://github.com/2tolgahan2/RESTCov

arXiv Semantic Scholar

View source

Similar papers

Preprint Sep 2026

Detecting HTTP Status Code Misuses in REST APIs via Static and Dynamic Analysis

REST APIs are widely used on the web for client-server communications. As REST is based on HTTP, server responses contain status codes to indicate the outcome of requests (e.g., 200 OK for a success and 404 Not Found for an unavailable resource). While HTTP status codes are standardized, their semantics are not enforce...

Alix Decrop, Andrea Arcuri, Mike Papadakis et al. · 0 citations

Evaluation of large language models in api testing using open API documentation

This study evaluates the effectiveness of multiple state-of-the-art LLMs in generating executable REST API test cases from OpenAPI documentation and proposes a generalized prompt template that balances reasoning quality and practical usability for exploratory API testing.

Phyu Thet Thet Kyaw · 0 citations

Preprint Aug 2026

Database-Augmented RAG for Automated Repair of REST API Misuses

Results indicate that organizing specifications according to version and content type can be an effective design choice for RAG-based REST API misuse repair.

Shoei Inoue, Norihiro Yoshida, Erina Makihara et al. · 0 citations

Preprint Aug 2026

Validating HTTP Semantics in REST APIs With Constructed Call Sequence Scenarios

The novel automated techniques presented have been effective at automatically finding several of this type of faults in existing REST APIs and are shown to be effective at automatically finding several of this type of faults.

Omur Sahin, Andrea Arcuri · 0 citations

#artificial intelligence Preprint Sep 2026

Can LLMs Reason About Runtime Behavior? A Repository-Level Dynamic Benchmark

SWE-Flux is introduced, a repository-level benchmark for dynamic execution reasoning containing 480 execution-grounded instances across 12 real Python repositories, with gold answers automatically harvested from instrumented test executions rather than written manually or judged by LLMs.

Hamed Taherkhani, Mohammad Abdollahi, Melika Sepidband et al. · 0 citations

#small language model Preprint Sep 2026

Towards Behavior Tree-Guided Vulnerability Detection with Lightweight LLMs

Investigating Behavior Trees (BTs) as an alternative intermediate representation for LLM-based vulnerability detection suggests that BTs can provide a compact and useful structured representation for vulnerability detection with quantized, locally deployable LLMs.

Enna Bašić, A. Giaretta · 0 citations