Exercise.com

Credentials: Exercise.com runs each business on its own host (your custom-branded platform, e.g. train.yourgym.com or yourgym.exercise.com). Put that host, without https://, in EXERCISE_HOST; the API is served from it at /api/v4.

API access is a paid add-on: ask your Exercise.com account representative to enable it. The v4 API takes two credentials on each call, as its reference documents (security api_key and bearer together):

1. EXERCISE_API_KEY: create it under Account > Customize Platform > Developers > Add and copy it at once (it is shown only once). Sent in the API-TOKEN header.
2. EXERCISE_ACCESS_TOKEN: the bearer token of the account the API acts as (a Personal API Token issued in the product, or the token provided with API access), sent as Authorization: Bearer. Use a token of the owner or an admin to see every member. Most member, booking and service reads answer with the access token alone, but schedules, assessment templates and logged workouts answer 401 unless both are sent.

Where to start: exercise_com_list_users gives member and staff ids (user_id). For bookings use exercise_com_get_calendar with affinity=schedule and a Unix-time window, or exercise_com_list_appointments / exercise_com_list_scheduled_appointments, then exercise_com_list_visits with appointment_id for who booked and attended.

Filtering: most list tools take filter, Ransack predicates written as a query-string fragment: q[status_eq]=completed&q[created_at_gteq]=2026-09-01. Keys are <field>_<predicate> such as _eq, _in, _gteq, _lteq, _cont; q[s]=created_at desc sorts. Unknown fields are ignored or rejected depending on the resource, so start without a filter and look at the field names in the answer.

Appointments need a date window: exercise_com_list_appointments over the whole history is slow enough to fail with HTTP 500, so its filter is required; pass q[start_time_gteq] and q[start_time_lt].

Paging: per and page (from 1). When either is set, the answer includes meta.total. Without them some lists return everything. pluck_columns returns a plain array of just those stored columns for every match (it can ignore per), handy for id lookups; computed fields such as service_name are not columns and make the call fail.

Times: the calendar takes Unix timestamps in seconds for start and end; other filters take dates or ISO 8601 times. Visits carry the time zone of the business.

Errors: 401 Access denied means a wrong host, a wrong or revoked token, or API access not enabled; 403 means the token's account may not see the resource; 404 a wrong id.

The interactive reference is at https://train.demoexercise.com/api-docs/ ("API V4 Docs"); its login is given in Exercise.com's support article on API keys (the docsUrl of this connector).

Packages, user packages, invoices and charges are not part of the documented v4 tenant API; Exercise.com documents them only in its newer API at api.exercise.com.