diff --git a/src/server.test.ts b/src/server.test.ts
index faf69a3..7317a2a 100644
--- a/src/server.test.ts
+++ b/src/server.test.ts
@@ -95,6 +95,23 @@ describe("API endpoints", () => {
     });
   });
 
+  it("POST /echo rejects a non-string message", async () => {
+    const message = "a".repeat(501);
+
+    const response = await app.inject({
+      method: "POST",
+      url: "/echo",
+      payload: {
+        message: 123,
+      },
+    });
+
+    assert.equal(response.statusCode, 400);
+    assert.deepEqual(response.json(), {
+      error: "Invalid request body",
+    });
+  });
+
   it("returns 404 for an unknown endpoint", async () => {
     const response = await app.inject({
       method: "GET",