Gymshark

Gymshark is a British fitness apparel and accessories brand founded in 2012 in Birmingham, England, selling gym and workout clothing direct to consumers worldwide through gymshark.com, a set of regional storefronts (uk., eu., row., de., fr., ca., au. and others) and its Gymshark Shop and Gymshark Training mobile apps. The storefront runs on Shopify behind a headless Next.js/OpenNext front end deployed on AWS, and customer identity is handled by an Auth0 tenant Gymshark operates on its own domain at auth.gymshark.com. Gymshark publishes no public developer portal, no developer documentation and no public product API; the only publicly discoverable machine-readable contract on its own hosts is the OpenID Connect / OAuth 2.0 authorization-server metadata served from auth.gymshark.com. Its engineering team does publish open-source Go, JavaScript and Swift libraries under the github.com/gymshark organization, and it runs a public vulnerability disclosure program on HackerOne.

Gymshark publishes 1 API on the APIs.io network. Tagged areas include Company, Retail, E-Commerce, Apparel, and Fitness.

Gymshark’s developer surface includes engineering blog, support, signup flow, authentication, and 20 more developer resources.

🌐 Visit website 📡 Source on GitHub

21.4/100 emerging ▬ flat Agent 9/100 agent aware Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0

1 APIs

CompanyRetailE-CommerceApparelFitnessConsumerDirect To ConsumerIdentityOpenID Connect

Kin Score

Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0

Composite quality — 21.4/100 · emerging

Contract Quality 0.0 / 25

Developer Ergonomics 3.5 / 20

Commercial Clarity 6.8 / 20

Operational Transparency 2.1 / 13

Governance 0.4 / 12

Discoverability 8.7 / 10

Agent readiness — 9/100 · agent aware

Machine-Readable Contract 0 / 18

Agentic Access Contract 0 / 10

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/gymshark: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Scopes 1

OAuth scopes governing access to this provider's APIs.

Gymshark Scopes

14 scopes · authorizationCode/clientCredentials/implicit/deviceCode

14 scopes

SCOPES

Resources

Get Started 2

Portal, sign-up, and the first successful call

SignUp

SignUp

Login

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

WellKnown

WellKnown

LLMsTxt

LLMsTxt

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Conformance

Conformance

Build 2

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

Packages

Packages

Access & Security 5

Authentication, authorization, and security posture

Authentication

Authentication

OAuthScopes

OAuthScopes

DomainSecurity

DomainSecurity

VulnerabilityDisclosure

VulnerabilityDisclosure

Security

Security

Operate 2

Status, limits, changes, and where to get help

Support

Support

HelpCenter

HelpCenter

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 4

The organization behind the API

Website

Blog

Careers

About

Other 4

Properties that don't map to a standard resource type

CookiePolicy

Sustainability

SecondaryMarket

OpenIDConnect

Source (apis.yml)

aid: gymshark
name: Gymshark
description: Gymshark is a British fitness apparel and accessories brand founded in 2012 in Birmingham, England, selling gym
  and workout clothing direct to consumers worldwide through gymshark.com, a set of regional storefronts (uk., eu., row.,
  de., fr., ca., au. and others) and its Gymshark Shop and Gymshark Training mobile apps. The storefront runs on Shopify behind
  a headless Next.js/OpenNext front end deployed on AWS, and customer identity is handled by an Auth0 tenant Gymshark operates
  on its own domain at auth.gymshark.com. Gymshark publishes no public developer portal, no developer documentation and no
  public product API; the only publicly discoverable machine-readable contract on its own hosts is the OpenID Connect / OAuth
  2.0 authorization-server metadata served from auth.gymshark.com. Its engineering team does publish open-source Go, JavaScript
  and Swift libraries under the github.com/gymshark organization, and it runs a public vulnerability disclosure program on
  HackerOne.
url: https://raw.githubusercontent.com/api-evangelist/gymshark/refs/heads/main/apis.yml
image: https://cdn.shopify.com/s/files/1/0098/8822/files/gymshark_social_banner_1200x1200.jpg?v=1549554764
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-04'
modified: '2026-08-04'
tags:
- Company
- Retail
- E-Commerce
- Apparel
- Fitness
- Consumer
- Direct To Consumer
- Identity
- OpenID Connect
apis:
- name: Gymshark Identity (OpenID Connect)
  description: The OpenID Connect / OAuth 2.0 authorization server Gymshark operates on its own domain at auth.gymshark.com
    (an Auth0 tenant) for Gymshark customer accounts across the web storefronts and the Gymshark Shop and Gymshark Training
    mobile apps. It is not a documented, self-serve developer API — Gymshark publishes no developer portal, client registration
    guide or API reference for it — but the authorization-server and OpenID provider metadata are served anonymously at the
    RFC 8414 / OpenID Connect Discovery well-known paths, so the endpoints, grant types, response types, scopes and claims
    are publicly discoverable and machine-readable.
  humanURL: https://auth.gymshark.com/.well-known/openid-configuration
  baseURL: https://auth.gymshark.com/
  tags:
  - Identity
  - Authentication
  - OpenID Connect
  - OAuth
  properties:
  - type: OpenIDConnect
    url: https://auth.gymshark.com/.well-known/openid-configuration
  - type: Authentication
    url: authentication/gymshark-authentication.yml
  - type: OAuthScopes
    url: scopes/gymshark-scopes.yml
  - type: WellKnown
    url: well-known/gymshark-well-known.yml
  - type: Conformance
    url: conformance/gymshark-conformance.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.gymshark.com/
- type: Blog
  url: https://www.gymshark.com/blog
- type: Support
  url: https://support.gymshark.com/
- type: HelpCenter
  url: https://support.gymshark.com/en/
- type: TermsOfService
  url: https://www.gymshark.com/pages/terms-and-conditions
- type: PrivacyPolicy
  url: https://www.gymshark.com/pages/privacy-policy
- type: CookiePolicy
  url: https://www.gymshark.com/pages/cookie-policy
- type: SignUp
  url: https://www.gymshark.com/account/register
- type: Login
  url: https://www.gymshark.com/account/login
- type: GitHubOrganization
  url: https://github.com/gymshark
- type: Careers
  url: https://careers.gymshark.com/
- type: About
  url: https://www.gymshark.com/pages/about-us
- type: Sustainability
  url: https://www.gymshark.com/pages/sustainability
- type: SecondaryMarket
  url: https://forgeglobal.com/gymshark_stock/
- type: OpenIDConnect
  url: https://auth.gymshark.com/.well-known/openid-configuration
- type: WellKnown
  url: well-known/gymshark-well-known.yml
- type: Authentication
  url: authentication/gymshark-authentication.yml
- type: OAuthScopes
  url: scopes/gymshark-scopes.yml
- type: Conformance
  url: conformance/gymshark-conformance.yml
- type: LLMsTxt
  url: llms/gymshark-llms.txt
- type: Packages
  url: packages/gymshark-packages.yml
- type: DomainSecurity
  url: security/gymshark-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/gymshark-vulnerability-disclosure.yml
- type: Security
  url: https://hackerone.com/gymshark
x-enrichment:
  date: '2026-08-04'
  status: enriched
  artifacts_added: 12
  pass: local-v1