We\'re required to use the API of an external partner. The API is in a good shape and we got access to a sandbox environment we can use for automatic testing.
We already
I believe there should be 2 level of verifications we need to do when we interface with an external API:
In our case, we use a mock API together with real and mock API verification.
If along the way, external API changes, API verification may turn red, triggering changes in mock API. Changes in mock API may make app verification turn red, triggering changes in app implementation. This way you never miss any gap between external API and app implementation (ideally).
Another extra benefit of having a mock API + API verification is that your developers can use it as a documentation/specification of how the API is supposed to work.