API Gateway PenTesting

Hi Guys
can you suggest any good way or tools to perform API Gateway pentesting?
Thanks