API testing should cover multiple levels.

Unit tests verify isolated business logic. Integration tests verify database and dependency interactions. Contract tests verify compatibility between producers and consumers. End-to-end tests verify realistic workflows through the API boundary.

Do not rely entirely on end-to-end tests. They are slower and often harder to diagnose.

A strong suite tests both success paths and failure paths.