Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.testsprite.com/llms.txt

Use this file to discover all available pages before exploring further.

API Discovery — endpoint list view

What API Discovery Does

Before TestSprite can generate a single test, it needs to know what endpoints exist. API Discovery is the phase that builds that list from the inputs you provide:
API Discovery — endpoint list view
InputWhat it provides
API documentationOpenAPI / Swagger / Postman collections, or any free-form reference document (markdown, PDF, plain text)
Base URLUsed to confirm endpoint behavior against your live API
Natural-language hintsTyped into the configuration form — “Skip the admin endpoints” / “Focus on the checkout flow”
The output is a structured endpoint list grouped by resource family, with the HTTP method, path template, request shape, and response shape captured for each.
Discovery happens on the configuration step of the wizard. You re-trigger it by editing the inputs (uploaded docs, base URL, hints) and clicking Parse with AI again before you submit. Once the project is created, you can Add endpoints manually; discovering a fundamentally new set of endpoints means starting a new project.

When Discovery Runs

You trigger discovery by clicking Parse with AI at the bottom of the configuration step (after you’ve uploaded your docs and provided a base URL). The endpoint list panel and detail panel both flip to a skeleton-placeholder state while it runs; when it completes, a toast confirms how many APIs and endpoints were found and the panels populate with the grouped result.
API Discovery — endpoint list view
A typical discovery run takes 30 seconds to 3 minutes depending on how many endpoints exist and how responsive your API is.

What Gets Discovered

For each endpoint TestSprite finds, it captures:
FieldDescription
Method (GET / POST / PUT / PATCH / DELETE)The HTTP method for the endpoint
Path template (e.g. /users/{id}/orders)The path with placeholders normalized
Request shapeBody schema, query params, required headers
Response shapeExpected status codes and body schema
Auth requirementWhether this endpoint requires authentication, and what type
Resource familyEndpoints grouped together by resource (e.g. /users/* → Users family)
These all feed into Plan Generation, which uses the request/response shapes to write tests that match your real API rather than guessing at field names.

Reviewing the Discovered Endpoint List

Once discovery completes, the page shows your endpoints in a grouped, expandable table. Each resource family is a collapsible group; expand to see the per-endpoint rows.
Grouped endpoint list with family expand/collapse
For each row you can:
1

Remove an endpoint

Click the × at the end of the row. Endpoints removed at this step won’t get tests generated for them. Useful for internal-only endpoints, deprecated paths, or anything outside your test scope.
2

Adjust the method or path

Click the row to edit. TestSprite’s discovery is mostly accurate, but if the path template is off (e.g. {userId} got captured as a literal value), you can correct it here.
3

Set the auth type per family

Use the Authentication Type dropdown on each API family. Choices are Basic, Bearer, API-key, or None. Setting it once at the family level applies to every endpoint in that family.

Adding Endpoints Manually

Sometimes Discovery misses an endpoint — it might be private, undocumented, or otherwise unreachable from the inputs you provided. Click Add Manually at the bottom of the configuration step (or use the inline “add endpoints manually” link under the upload card):
Add endpoint manually dialog
Manually-added endpoints sit alongside the discovered ones in the list. You can paste a sample request body to give TestSprite a head start on the request shape.

Auth Configuration During Discovery

The auth configuration here is discovery-time only — TestSprite uses it to confirm endpoint behavior during discovery. It’s separate from the auth that gets used during the actual test runs:
Discovery-time auth (this page)Test-run-time auth
Provided once at project creationConfigured per-family on the Authentication sidebar tab, used for actual test execution
Single bearer token / API key / basic-auth pairPer-API-family Static Credentials, or Auto-Auth (Pro) for token refresh
If credentials expire, fix them in the configuration step and re-trigger Parse with AIStatic credentials need manual rotation; Auto-Auth handles rotation automatically
Use the same test account for both. Discovery and test runs both call your real API with real credentials. Provide a long-lived test account that has permissions across the full API surface — Auto-Auth on the test-run side handles token rotation, but the test user identity should be one you control.

Adjusting Discovery via Natural Language

The configuration form has an “Extra testing instructions” textarea — anything you say there shapes both discovery and downstream plan generation. Some patterns that work well:
Skip anything under /admin/ — we don't test admin endpoints from this account.
The uploaded docs are your primary signal. The textarea is for explaining the things that aren’t in your docs but matter for testing.

Iterating on Discovery Before You Submit

Discovery is iterative while you’re still in the configuration step — adjust the inputs (upload a better OpenAPI spec, fix the base URL, refine the natural-language hints, update the credentials) and click Parse with AI again. Each Parse run replaces the discovered list with a fresh result, so the order of operations is: get the inputs right, parse, review, optionally edit per-endpoint or add manually, then continue to plan generation. Once the project is created, the discovered set is locked in for that project. To pick up endpoints that have shipped since the initial scan, add them manually on the configuration step (if you haven’t yet submitted) or start a new project.

When Discovery Doesn’t Find Things It Should

Discovery uses the credentials from your config form. If your endpoint requires more elaborate auth (HMAC signing, mutual TLS, geographic IP restriction), the endpoint may be dropped or marked unconfirmed. Add it manually with a sample body, or expose a non-auth health endpoint TestSprite can hit.
POST /orders/{id}/cancel requires an existing order, and discovery can’t satisfy that on its own. Add the endpoint manually; the integration-test phase will figure out the dependency chain.
TestSprite is REST-first; GraphQL discovery is best-effort. For Apollo/Relay-style APIs we recommend uploading a .graphql schema file as part of the documentation upload. Pure RPC (gRPC, JSON-RPC) is not supported in v1.
If an endpoint isn’t in your uploaded docs and doesn’t follow common REST conventions (e.g. /api/v2/foo.action), discovery might miss it. Add manually.

Where to Go Next

Plan Generation & Editing

The next wizard phase — turn discovered endpoints into a test plan

Auto-Auth (Pro)

Configure test-run-time auth (separate from discovery-time auth)

API Testing — Overview

Step back to the journey map

Refining Tests

Use natural language after generation, too