EGYM · Authentication Profile

Egym Authentication

Authentication

EGYM secures its APIs with apiKey, http, and oauth2 across 4 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials flow(s).

CompanyFitnessHealthWellnessCorporate WellnessConnected EquipmentGym ManagementMember ManagementCheck-inMeasurementsWorkoutsAnalyticsWebhookGermany

Methods: apiKey, http, oauth2 Schemes: 4 OAuth flows: clientCredentials API key in: header

Security Schemes

mms apiKey

· in: header (x-api-key)

user http

scheme: bearer

partner oauth2

· flows: clientCredentials

accesstoken apiKey

· in: header (X-ACCESS-TOKEN)

Source

Authentication Profile

generated: '2026-08-12'
method: derived
source: openapi/egym-data-export-openapi.yml, openapi/egym-data-hub-openapi.yml, openapi/egym-equipment-vendor-server-openapi.yml,
  openapi/egym-equipment-vendor-standalone-openapi.yml, openapi/egym-mms-api-v1-openapi.yml,
  openapi/egym-mms-api-v2-openapi.yml
summary:
  types:
  - apiKey
  - http
  - oauth2
  api_key_in:
  - header
  oauth2_flows:
  - clientCredentials
schemes:
- name: mms
  type: apiKey
  in: header
  parameter: x-api-key
  description: Authentication is validated via an API key that is generated by EGYM for each
    gym location. This API key will not be identical with the access token used in the EGYM
    Gym API v1
  sources:
  - openapi/egym-data-export-openapi.yml
  - openapi/egym-data-hub-openapi.yml
  - openapi/egym-equipment-vendor-server-openapi.yml
  - openapi/egym-mms-api-v2-openapi.yml
- name: user
  type: http
  scheme: bearer
  bearerFormat: JWT
  sources:
  - openapi/egym-equipment-vendor-server-openapi.yml
  - openapi/egym-equipment-vendor-standalone-openapi.yml
- name: partner
  type: oauth2
  flows:
  - flow: clientCredentials
    tokenUrl: /api/v1/oauth/token
    scopes: 0
  sources:
  - openapi/egym-equipment-vendor-standalone-openapi.yml
- name: accesstoken
  type: apiKey
  in: header
  parameter: X-ACCESS-TOKEN
  description: The token that will allow access the EGYM gym api for a specific gym.
  sources:
  - openapi/egym-mms-api-v1-openapi.yml

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/egym-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.