How do you approach testing an API, and what tools do you use to validate payloads and response codes?