Comparison Tool

Gym software API matrix: auth, access, webhooks and coverage

Of the 11 gym and studio platforms here, 4 document webhooks (Mindbody, ABC Glofox, TeamUp, Mariana Tek), and 2 state an API price on the pages read: Mindbody and TeamUp. Mindbody charges past 1,000 calls a day; TeamUp says there is no extra fee. Authentication ranges from a single x-api-key header (Wodify) to OAuth with PKCE (Mariana Tek). Each cell quotes the vendor passage behind it; "not stated" means the pages read do not say, not that the feature is missing. Every quote was re-found in its live source on 2026-11-05.

Platform	Authentication	How you get access	API pricing	Rate limits	Webhooks	Sandbox or test business	Bookings	Members	Memberships	Payments	Check-ins	Zapier
ABC Fitness partner program (ABC Ignite, ABC Evo)	Not stated in the passages read	Register at partners.abcfitness.com and ABC reviews the request; for ABC customers with in-house developers or vendors serving a mutual customer 2 source quotes Please submit a new partner registration at https://partners.abcfitness.com/ . We will review your request and will be in touch to discuss next steps. abcfitness.com You are a customer of ABC and have your own in house developer or you are a vendor and would like to support an integration for a mutual customer and have the ability to meet and adhere to ABC’s infosec and data privacy policies. abcfitness.com	Several tiers, with terms discussed during evaluation and onboarding Source quote ABC Partner program consists of several tiers and related terms that we can discuss with you as part of your evaluation and onboarding process. abcfitness.com	Not stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read
ABC Glofox	x-api-key, x-glofox-api-token and x-glofox-branch-id headers, always proxied through a secure backend 4 source quotes x-glofox-branch-id Branch ID for the current request. api-portal.glofox.com x-api-key API key for the integration. api-portal.glofox.com x-glofox-api-token API token for the integration. api-portal.glofox.com Always proxy API key and token requests through a secure backend. Never expose credentials in client-side applications. api-portal.glofox.com	A Request access entry in its API portal Source quote Request access api-portal.glofox.com	Not stated in the passages read	Requests over the rate limit are blocked Source quote The API blocks the request when you exceed the rate limit. api-portal.glofox.com	DocumentedBooking, member, membership and invoice events 4 source quotes Handle booking events api-portal.glofox.com Handle member events api-portal.glofox.com Handle membership events api-portal.glofox.com Handle invoice events api-portal.glofox.com	Not statedNot stated in the passages read	DocumentedBooking events; mark a booking as attended 2 source quotes Handle booking events api-portal.glofox.com Mark a booking as attended api-portal.glofox.com	DocumentedMember events Source quote Handle member events api-portal.glofox.com	DocumentedMembership events Source quote Handle membership events api-portal.glofox.com	DocumentedInvoice events Source quote Handle invoice events api-portal.glofox.com	DocumentedMark a booking as attended Source quote Mark a booking as attended api-portal.glofox.com	Not statedNot stated in the passages read
ABC Trainerize	Not stated in the passages read	API access for eligible Studio and Enterprise customers Source quote API access for eligible Studio and Enterprise customers. www.trainerize.com	Not stated in the passages read	Not stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	DocumentedWorkflow automation through Zapier Source quote Workflow automation through Zapier. www.trainerize.com
ClubReady	An ApiKey parameter alongside a StoreId 2 source quotes Api Key - grants access to resources www.clubready.com StoreId query integer Yes StoreID www.clubready.com	Not stated in the passages read	Not stated in the passages read	The class-schedule operation covers at most 7 days per request Source quote Specify ToDate/FromDate (max 7 days) to get a list of classes within a date range. www.clubready.com	Not statedNot stated in the passages read	Not statedNot stated in the passages read	DocumentedClass booking and class schedule operations (JSON, XML, JSV and CSV) 2 source quotes CreateClassBookingRequest www.clubready.com GetClassScheduleRequest JSON XML JSV CSV www.clubready.com	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	DocumentedA check-in operation Source quote DoCheckInRequest JSON XML JSV CSV www.clubready.com	Not statedNot stated in the passages read
Exercise.com	Not stated in the passages read	Custom integrations built by its own team Source quote If you need a custom software integration that we don't already have, let us explore a solution for your business. www.exercise.com	Not stated in the passages read	Not stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	DocumentedZapier consulting from its team Source quote Need some help using Zapier? Let our team of experts hook up your zaps so that your fitness business is humming. www.exercise.com
Mariana Tek	OAuth 2.0 Authorization Code (with PKCE for public clients) or an API key tied to a service account, as bearer tokens 3 source quotes Mariana Tek supports the Authorization Code flow for confidential applications and the Authorization Code w/ PKCE flow for public applications. guides.marianatek.com To make an authenticated request with an API key, bearer authentication should be used: guides.marianatek.com those authenticated with an API key will be tied to the service account associated with your application guides.marianatek.com	Register through its Integrations team; a technical review before going live with a studio can take up to 1-3 weeks 3 source quotes In order to register your application and get credentials to start authenticating via OAuth, please contact integrations@marianatek.com . guides.marianatek.com Reviews can take up to 1-3 weeks to complete. guides.marianatek.com Before you go live with a Mariana Tek Studio Client, you may need to submit your integration for technical review and approval. guides.marianatek.com	Not stated in the passages read	Not stated in the passages read	DocumentedAccount, reservation and class check-in events, after a subscription request; production needs the studio owner's approval by email 3 source quotes To set up webhooks for a studio's production environment, you must have approval from the Studio Owner sent to Integrations by email. guides.marianatek.com For example, you can rely on webhooks to trigger an action in your app/integration when a customer creates an account, makes a reservation, or checks in to class. guides.marianatek.com Please contact integrations@marianatek.com to start using webhooks. guides.marianatek.com	DocumentedA sandbox mock studio seeded with sample data 2 source quotes A sandbox is a mock studio client that developers can leverage to build and test integrations. guides.marianatek.com is seeded with sample data guides.marianatek.com	DocumentedReservation events; a Customer API for custom booking and buying experiences 2 source quotes For example, you can rely on webhooks to trigger an action in your app/integration when a customer creates an account, makes a reservation, or checks in to class. guides.marianatek.com Mariana Tek's Customer API gives you the power to build custom booking and buying experiences for fitness customers. docs.marianatek.com	DocumentedAn event when a customer creates an account Source quote For example, you can rely on webhooks to trigger an action in your app/integration when a customer creates an account, makes a reservation, or checks in to class. guides.marianatek.com	Not statedNot stated in the passages read	DocumentedThe Customer API is built for custom buying experiences Source quote Mariana Tek's Customer API gives you the power to build custom booking and buying experiences for fitness customers. docs.marianatek.com	DocumentedAn event when a customer checks in to class Source quote For example, you can rely on webhooks to trigger an action in your app/integration when a customer creates an account, makes a reservation, or checks in to class. guides.marianatek.com	Not statedNot stated in the passages read
Mindbody	API key in an API-Key header plus a User-Agent header; every call from your back-end servers 3 source quotes To make a successful API call, pass an API key as an API-Key header. developers.mindbodyonline.com You must specify a User-Agent header when working with Mindbody APIs. developers.mindbodyonline.com Because API keys cannot be safely stored on mobile devices or websites, all requests to the API must come from your back-end servers. developers.mindbodyonline.com	Self-serve developer account, a request to go live, Mindbody's approval, then each business activates you with a link or code 4 source quotes Go to our developer portal and create your developer account. developers.mindbodyonline.com While logged into your developer account, request to go live with your developer account. developers.mindbodyonline.com Once Mindbody approves you for live access, activate the link between your developer account and at least one Mindbody business developers.mindbodyonline.com you've given them access to your site data using an activation link or code developers.mindbodyonline.com	1,000 calls a day, then one third of a cent per call with live clients; billed monthly, starting 30 days after you first get a business's data 3 source quotes There is a 1,000 call limit per day when using the API. Once this limit is reached, you will be charged one third of a cent for every call. You will be charged to use the API only with live clients. Testing through the sandbox is free of charge, but is restricted to 1,000 calls a day. developers.mindbodyonline.com Mindbody calculates and bills its fees and charges on a monthly basis. developers.mindbodyonline.com Commencing 30 days from the date you receive access to Subscriber data developers.mindbodyonline.com	Daily call limits are set when you receive your API key Source quote Your daily call limits are defined when you receive your API Key. developers.mindbodyonline.com	DocumentedSigned with X-Mindbody-Signature (HMAC-SHA-256); resent every 15 minutes for up to 3 hours 3 source quotes Encode the request body using an HMAC-SHA-256 library in your coding language of choice. developers.mindbodyonline.com The header name is X-Mindbody-Signature and the value is a UTF-8 encoded hash. developers.mindbodyonline.com we try to resend the event every 15 minutes. After 3 hours, Mindbody stops trying to resend the event. developers.mindbodyonline.com	DocumentedSandbox testing is free, limited to 1,000 calls a day Source quote There is a 1,000 call limit per day when using the API. Once this limit is reached, you will be charged one third of a cent for every call. You will be charged to use the API only with live clients. Testing through the sandbox is free of charge, but is restricted to 1,000 calls a day. developers.mindbodyonline.com	DocumentedClass registration and appointment booking; an event when a client is booked into a class 3 source quotes Mindbody sends this event when a client is booked into a class. developers.mindbodyonline.com Class Registration developers.mindbodyonline.com Book Appointments developers.mindbodyonline.com	Not statedNot stated in the passages read	DocumentedAn event when a client gets a new membership Source quote Mindbody sends this event when a client gets a new membership. developers.mindbodyonline.com	DocumentedAn event when a sale is made to a client Source quote Mindbody sends this event when a sale is made to a client. developers.mindbodyonline.com	Not statedNot stated in the passages read	Not statedNot stated in the passages read
PushPress	Not stated in the passages read	Integration partners are hand-picked rather than opened to thousands of integrations Source quote Integration partners are curated by actual gym owners. Rather than open up to 1,000s of integrations, we hand-picked the best one that offer the most value, and is the easiest to use. www.pushpress.com	Not stated in the passages read	Not stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	DocumentedZapier for syncing data with other systems, no coding required Source quote Sync your PushPress data with other systems - no coding required! www.pushpress.com
TeamUp	OAuth (recommended) for a customer or staff member, M2M tokens for the business, Direct Authentication only after review; no static API keys 4 source quotes Direct Authentication — a fully branded login experience where your app handles user passwords directly. Only enabled after TeamUp reviews your use case. docs.goteamup.com OAuth (recommended) — your app acts on behalf of an end user (a customer or staff member) docs.goteamup.com M2M tokens — your app acts on behalf of the business itself, with no user login involved. docs.goteamup.com TeamUp does not support the OAuth `client_credentials` grant or static API keys docs.goteamup.com	A super admin creates an API Application in the business dashboard; free trial accounts can too 2 source quotes API Applications are created and managed by staff members with the super admin permission at the business (typically the business owner). Applications are created directly in the business dashboard docs.goteamup.com You don't need a paid plan to start building: free trial accounts can create API Applications too. docs.goteamup.com	No extra fee for API access Source quote There is no extra fee for API access docs.goteamup.com	250 requests per minute per caller unless an endpoint says otherwise Source quote Unless otherwise noted in an endpoint's description, the rate limit is 250 requests per minute for a caller. docs.goteamup.com	DocumentedIts getting-started guide lists receiving event notifications with webhooks Source quote Receive event notifications with Webhooks docs.goteamup.com	DocumentedNo separate sandbox; a free trial account serves as the test business Source quote There is no separate sandbox environment. To test your integration, sign up for a free trial account at goteamup.com and use it as a test business docs.goteamup.com	DocumentedOAuth use cases include a customer website where users book spots Source quote A branded customer website showing upcoming classes and allowing users to book spots docs.goteamup.com	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read
Wodify	x-api-key header Source quote To authenticate your requests to Wodify's APIs, you'll need to include an x-api-key header in your HTTP requests. docs.wodify.com	A gym finds its key in Wodify Core or requests one; partners get keys from the Wodify Developer Portal 3 source quotes You can find it in Wodify Core via Digital Presence > Web Integrations > API Keys. docs.wodify.com If you don't have one, please request one through the Automations → Integrations page. docs.wodify.com For Wodify Partners: You can retrieve your API Key by visiting the Wodify Developer Portal. docs.wodify.com	Not stated in the passages read	5 requests per second, bursts of 20, 500,000 requests per month 3 source quotes Rate 5 requests per second docs.wodify.com Burst 20 requests docs.wodify.com Quota 500,000 requests per month docs.wodify.com	Not statedIts documentation navigation (getting started, authentication, rate limiting, search) does not mention webhooks 4 source quotes Getting Started with Wodify APIs docs.wodify.com Authentication docs.wodify.com Rate Limiting docs.wodify.com Using Search Functionality docs.wodify.com	Not statedNot stated in the passages read	DocumentedGet, search, create and delete class reservations Source quote Get, search, create, and delete Class Reservations and Sign-ins for Clients, Leads, and Drop-ins. docs.wodify.com	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	DocumentedSign-ins for clients, leads and drop-ins Source quote Get, search, create, and delete Class Reservations and Sign-ins for Clients, Leads, and Drop-ins. docs.wodify.com	Not statedNot stated in the passages read
Zen Planner	Not stated in the passages read	Its integrations page says its API lets businesses build custom integrations or connect proprietary tools Source quote Zen Planner’s flexible API allows your to build custom integrations or connect proprietary tools to create a setup tailored to your operations. www.zenplanner.com	Not stated in the passages read	Not stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	Not statedNot stated in the passages read	DocumentedLists Zapier among its integrations Source quote Automate workflows with Zapier www.zenplanner.com

How this matrix is built

Every cell cites rows of ops/sources/evidence/fitness-apis-gym-management-software-apis.json, the evidence the roundup page was written from, and the page prints each row's verbatim quote under the cell. No fact here is new.
Every quote in that file was found again in its live source by the source-quotes workflow (run 42082822142) on 2026-11-05.
"Not stated" means the vendor passages read do not say. It is not a "no": a cell says no only where a quoted passage does.
The order after you tick needs counts documented features only. It ranks documentation, not products, and nothing on this page is a recommendation.

The full write-up, with the context these cells leave out: Gym and studio management software APIs.

Next step

Turning this into a choice of API: