How to Integrate the Mariana Tek API (2026)

Mariana Tek sells boutique fitness software to studios and franchises, and publishes a family of APIs for the developers who build around it. This guide is written from Mariana Tek's developer guides at guides.marianatek.com and its Customer API OpenAPI document as they stood on October 17, 2026.

Still choosing a platform? Our gym and studio management software API comparison puts Mariana Tek next to Mindbody, TeamUp, Wodify and ABC Glofox.

Which Mariana Tek API you need#

Mariana Tek's API overview lists seven surfaces:

Its "ways to build" page maps them to projects. Custom development for a studio's website uses the pre-built Web Integrations, the Customer API, or both. A studio app that helps owners run the business extends the Admin Application with the Admin API, and can use the Pricing Engine to change class prices dynamically. A customer app used by one or many studios combines the Customer API with Universal Authentication. A booking app that partners with many studios uses Bypass Bookings.

The Customer API is described in an OpenAPI document at https://docs.marianatek.com/api/customer/v1/schema/, which Mariana Tek introduces as giving you "the power to build custom booking and buying experiences for fitness customers". Generate a client from it rather than hand-writing request types.

Access: through Mariana Tek's Integrations team#

There is no public sign-up form in the guides we read. To register an application and get OAuth credentials, the credentials guide says to contact integrations@marianatek.com, and the same address manages API keys. Mariana Tek's FAQ describes a Developer Portal for managing sandbox integrations, generating credentials and starting a technical review, but says it is in Beta and not uniformly available yet.

You build against a sandbox: a mock studio seeded with sample data, with its own tenant name, sandbox API and Web Integrations, almost identical to production. Every studio, live or sandbox, is addressed by its tenant name (the MT subdomain), and the sandbox API lives at https://{tenant_name}.marianatek.com/api. Sandbox tenant names often end in .sandbox. Integration partners get access to their sandbox Admin App during onboarding.

Credentials: OAuth or an API key#

Mariana Tek accepts two kinds of credential, and both are sent with bearer authentication:

• OAuth 2.0 client credentials, when requests should act for an end user: apps that need a studio owner or customer to log in, user-scoped views and profiles, or single sign-on. Single-page and mobile apps must use OAuth.
• An API key, tied to a service account for your application, when you manipulate data for many users without any one user's login. You choose the service user's permissions when you register, and keys belong only on a server: Mariana Tek says never to commit them to version control or use them in client-side code.

curl -H "Authorization: Bearer YOUR_API_KEY_OR_ACCESS_TOKEN" \
  "https://YOUR_TENANT.marianatek.com/api/users/self"

The OAuth flow, on the studio's subdomain#

Mariana Tek supports the Authorization Code flow for confidential clients, such as server-side web apps, and the Authorization Code flow with PKCE for public clients, such as single-page and mobile apps. Both run on the brand's own subdomain:

GET  https://{SUBDOMAIN}.marianatek.com/o/authorize
       ?response_type=code&client_id=...&redirect_uri=...&state=...
       (PKCE adds code_challenge and code_challenge_method=S256)

POST https://{SUBDOMAIN}.marianatek.com/o/token/
       grant_type=authorization_code, client_id, code, redirect_uri,
       plus client_secret (Authorization Code) or code_verifier (PKCE)

Details from the guide:

• state is required, and Mariana Tek tells you to check it on the callback to prevent CSRF.
• prompt=True forces a login even when the user already has a session. Without it, a user with an active session is sent straight back to your redirect_uri.
• The example token response has expires_in of 604800 seconds, which is seven days, along with a refresh_token. Exchange it with grant_type=refresh_token; confidential clients also send their client_secret.
• The redirect URL must match the registered one exactly. Mariana Tek's FAQ lists the usual causes of a mismatch error: no redirect URL registered yet, a typo, a trailing backslash on only one of the two URLs, URL encoding, or an old URL still registered.

The OAuth explainer covers why public clients need PKCE.

Webhooks are enabled on request#

Mariana Tek can post events to your URL, for example when a customer creates an account, makes a reservation or checks in to class. There is no self-serve subscription in the guides: you ask Integrations, giving your HTTPS subscriber URL, the events you want and the environment. For a studio's production environment, Integrations needs the studio owner's approval by email.

One design rule matters if you plan to serve many studios. Mariana Tek calls an integration that can be switched on for a new studio from one bundle of credentials a one-click-install, and for webhooks that requires subscriber URLs that are identical across clients or differ only by the MT subdomain. Build the subdomain into your URL path from day one.

Technical review before going live#

Before going live with a studio, you may have to pass a technical review; Mariana Tek says not every app needs one. The integration must be fully built and tested in the sandbox first. The submission covers how the integration works, the endpoints and webhooks it uses, credentialed access to a test environment, a screen recording, and the studios you work with or plan to. Mariana Tek says reviews "can take up to 1-3 weeks to complete".

Two consequences of approval to plan for:

• Scoped access. Your account permissions are limited to the endpoints and use cases that were reviewed and approved, and using other endpoints you can reach is not permitted.
• Ongoing standing. If a launched integration falls outside the approved guidelines, Mariana Tek discontinues its API access until you work through a consultation with your integration manager.

What we could not find#

Neither rate limits nor API pricing appear in the guides we read, and the Admin API reference was not among the pages we fetched. Ask Integrations about both before you size a production rollout.

Mariana Tek also lists its existing partners in a marketplace at partners.marianatek.com, including ClassPass, Wellhub and Spivi, which is a quick way to see which kinds of integrations it already approves. The rest of the cluster is at how to integrate a fitness or health API.