Functional black box tests like #Cucumber BDD Tests should not access internals of the app like the database. If the black box has no external API expose the results, why is it worth checking the result in the first place?
Use APIs to create the initial state, use APIs to conduct the test, use APIs to verify the result.