Ask HN: What is the best tool to check for vulnerabilities in a REST API?

I'm also interested in vulnerabilities in web apps in general, but as all my apps ultimately do their server-side stuff through an API, I should probably check that, first.

I'm looking for something for Mac, or that works/can be compiled for Mac, preferably.