Start here

Pick your role

Manual testers, automation engineers, developers, DevOps and QA leaders each need a different first lesson. Pick the one closest to yours. You don't need to code to start.

How it works

Watch it, run it, practice it

Every lesson follows the same three steps, so you always know what comes next.

  1. Watch

    A short video explains one idea in plain English, then shows it done in Shift-Left API. Chapters let you jump straight to the part you need.

  2. Run

    Click Run and a real HTTPS request goes to our public sandbox API. Change headers, swap payloads and break things on purpose. Nothing to install, no keys to manage.

    See the sandbox API →
  3. Practice

    Each lesson ends with a lab: do the same task in Shift-Left API, free, and check one result. Mark the lesson complete and your progress is saved in this browser.

The curriculum

9 tracks, from first request to shift-left pipeline

Start with the fundamentals or jump to the track you need.

  1. REST request and response flow between a client and an APITrack 1

    5 lessons · 39 min

    API Fundamentals for Beginners

    What an API is, requests and responses, HTTP methods, status codes and pagination.

    • Manual testers
    Open track →
  2. GraphQL query, schema and response side by sideTrack 2

    10 lessons · 1h 17m

    REST, GraphQL, SOAP and WebSockets Explained

    How REST, GraphQL, SOAP and WebSockets work, and how they differ.

    • Manual testers
    • Developers
    Open track →
  3. API key, JWT and OAuth 2.0 authentication methodsTrack 3

    4 lessons · 29 min

    API Authentication Explained

    API keys, JWTs, OAuth 2.0 and token refresh: the auth concepts behind every protected API.

    • Developers
    • QA and engineering leaders
    Open track →
  4. Status, header, body and schema assertions on one responseTrack 4

    3 lessons · 26 min

    API Testing Basics: Your First Test Patterns

    Negative testing, retries and timeouts, and validation errors: the first test patterns to learn.

    • Manual testers
    • Automation engineers
    Open track →
  5. Two OpenAPI spec versions with a breaking change highlightedTrack 5

    9 lessons · 1h 24m

    OpenAPI, Contract and Schema Testing

    Generate tests from an OpenAPI spec, validate schemas and catch contract drift before merge.

    • Developers
    • Automation engineers
    Open track →
  6. A mock server answering requests from a specTrack 6

    8 lessons · 1h 11m

    Test Data, Mocks and End-to-End API Testing

    Mock servers, mocks versus stubs, test data generation and end-to-end API flows.

    • Automation engineers
    Open track →
  7. API tests running inside a CI/CD pipelineTrack 7

    7 lessons · 1h 11m

    API Testing in CI/CD, Regression and Performance

    Pipeline gates, regression packs, load testing and monitoring for your APIs.

    • DevOps engineers
    Open track →
  8. AI generating tests from a requirement before code existsTrack 8

    7 lessons · 1h 10m

    AI and Shift-Left Testing Strategy

    Shift-left in practice, AI test generation, LLM testing and agentic testing.

    • QA and engineering leaders
    Open track →
  9. A visual workflow chaining API calls in Shift-Left APITrack 9

    15 lessons · 15 videos · 1h 43m

    Shift-Left API in Depth

    The 12-step product journey, from first project to CI, one feature per lesson.

    • Manual testers
    • Automation engineers
    • Developers
    • DevOps engineers
    • QA and engineering leaders
    Open track →
API 101 · beginner path

New to APIs? Follow these 10 steps.

API 101 is the beginner path through the Learning Center. Each step builds on the last, from your first request to your first negative tests.

Start step 1 →
  1. What is an API?

    Clients, servers, endpoints and your first real request.

  2. Requests and responses

    URLs, headers, bodies, query parameters and pagination.

  3. HTTP methods

    GET, POST, PUT, PATCH and DELETE, and what idempotent means.

  4. HTTP status codes

    What 2xx, 4xx and 5xx tell you, and which codes to expect.

  5. REST, GraphQL and SOAP

    The main API styles, how they work and how they differ.

  6. Authentication concepts

    API keys, JWTs, OAuth 2.0 and refreshing tokens.

  7. Write your first API tests

    Send a request, assert on status and body, and save it as a test.

  8. Negative testing

    Prove the API fails safely on bad, hostile and boundary input.

  9. Retries and timeouts

    Test how clients and APIs behave on slow or failing networks.

  10. Validation errors

    Make every bad request fail in one predictable, testable shape.

All 68 lessons

Every lesson in every live track, in order.

API testing course for beginners: FAQ

Is this API testing course free?+

Yes. All 68 lessons, the 15 video lessons and the practice API are free, with no signup and no credit card. Hands-on labs from the third lesson of each track ask for your email and role once, which unlocks every lab on the site.

Is there a free API testing course with a certificate?+

Not here yet. The Learning Center is free and you can track which lessons you have completed, but it does not issue certificates today; certificates for finishing a track are on the roadmap. If you need a certificate for an employer now, use these lessons to learn and a certified course for the paper.

How do I start learning API testing as a beginner?+

Start with what an API is and how a request and a response are built, then learn HTTP methods and status codes. Next, learn how REST, GraphQL and SOAP differ and how authentication works, and only then write your first tests. API 101, the beginner path on this page, follows exactly that order and you can run every step in your browser.

What is the API testing roadmap from beginner to advanced?+

The Learning Center is laid out as that roadmap, in 9 tracks: API fundamentals; REST, GraphQL, SOAP and WebSockets; authentication; first test patterns; OpenAPI, contract and schema testing; test data, mocks and end-to-end testing; CI/CD, regression and performance; AI and shift-left strategy; and a product track for Shift-Left API itself. Take them in order, or start where your role does.

How long does it take to learn API testing?+

Each lesson takes 6 to 12 minutes. The API 101 beginner path (10 steps) takes about 2 hours, and all 68 lessons take about 9.5 hours. Reading is the quick part: getting comfortable usually takes a few weeks of regular practice against a real API.

Is API testing easy to learn?+

The basics are approachable, because an API test is visible: you send a request and check the response. What takes practice is deciding what to test, such as negative cases, authentication and contracts, and then automating the tests in a pipeline. Learning HTTP first, then test design, then automation keeps each step small.

Do I need to know how to code to learn API testing?+

No. The beginner path starts from zero: you read raw HTTP requests and responses and run them from the page. Coding helps later when you automate tests, and the lessons link to beginner guides for Postman and Python when you get there.

Is there a free API I can use to practice API testing?+

Yes. The lessons use a public sandbox at demo.totalshiftleft.ai: a small store API with users, products and orders, its OpenAPI spec, a GraphQL endpoint and a SOAP service with a WSDL. Flags such as ?delay=2000 and ?error=503 simulate slow and failing responses. It needs no key, each visitor gets a private session, and the data resets when you stop using it.

Do I need to install anything?+

Not to start. Lessons run in your browser and send real HTTPS requests to the sandbox, so you see actual JSON, headers and status codes without installing Postman, curl or an SDK. The hands-on labs use Shift-Left API: the free edition, or the 15-day trial for Test Run Packs, CI and the performance and security add-ons.

Can I track my progress through the lessons?+

Yes. Click "Mark as complete" on a lesson and this page and the track pages show your progress, check off the lessons you have done and offer to continue where you left off. Progress is saved in your browser, so there is no account to create; it does not carry over to another browser or device.

Take what you've learned to your own APIs

The Free Developer License of Shift-Left API is a single-user license that renews free every 6 months: import an OpenAPI spec, generate tests, mock APIs and run workflows on your own machine. No credit card.

Updated