Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.