WHOOP · OAuth Scopes

WHOOP OAuth Scopes

OAuth 2.0 derived

WHOOP publishes 7 OAuth 2.0 scopes via the authorizationCode and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the WHOOP API on a user’s behalf.

Tokens are issued from https://api.prod.whoop.com/oauth/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

FitnessWearablesHealthRecoverySleepStrainHeart RateWorkoutBiometrics

Scopes: 7 Flows: authorizationCode, clientCredentials Method: derived

OAuth endpoints

Authorization URL
https://api.prod.whoop.com/oauth/oauth2/auth

Token URL
https://api.prod.whoop.com/oauth/oauth2/token https://api.prod.whoop.com/developer/v2/partner/token

Flows
authorizationCodeclientCredentials

Scopes (7)

Scope	Description	Flows
read:body_measurement	Read body measurements data, including height, weight, and max heart rate.	authorizationCode
read:cycles	Read cycles data, including day Strain and average heart rate during a physiological cycle.	authorizationCode
read:profile	Read profile data, including name and email.	authorizationCode
read:recovery	Read Recovery data, including score, heart rate variability, and resting heart rate.	authorizationCode
read:sleep	Read sleep data, including performance % and duration per sleep stage.	authorizationCode
read:workout	Read workout data, including activity Strain and average heart rate.	authorizationCode
whoop-partner/token	Read service requests and upload results.	clientCredentials

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/whoop-api-openapi.yml
schemes:
- name: OAuth
  source: openapi/whoop-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://api.prod.whoop.com/oauth/oauth2/auth
    tokenUrl: https://api.prod.whoop.com/oauth/oauth2/token
- name: Trusted Partner
  source: openapi/whoop-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://api.prod.whoop.com/developer/v2/partner/token
scopes:
- scope: read:body_measurement
  description: Read body measurements data, including height, weight, and max heart rate.
  flows:
  - authorizationCode
  sources:
  - openapi/whoop-api-openapi.yml
- scope: read:cycles
  description: Read cycles data, including day Strain and average heart rate during a physiological
    cycle.
  flows:
  - authorizationCode
  sources:
  - openapi/whoop-api-openapi.yml
- scope: read:profile
  description: Read profile data, including name and email.
  flows:
  - authorizationCode
  sources:
  - openapi/whoop-api-openapi.yml
- scope: read:recovery
  description: Read Recovery data, including score, heart rate variability, and resting heart
    rate.
  flows:
  - authorizationCode
  sources:
  - openapi/whoop-api-openapi.yml
- scope: read:sleep
  description: Read sleep data, including performance % and duration per sleep stage.
  flows:
  - authorizationCode
  sources:
  - openapi/whoop-api-openapi.yml
- scope: read:workout
  description: Read workout data, including activity Strain and average heart rate.
  flows:
  - authorizationCode
  sources:
  - openapi/whoop-api-openapi.yml
- scope: whoop-partner/token
  description: Read service requests and upload results.
  flows:
  - clientCredentials
  sources:
  - openapi/whoop-api-openapi.yml