GymMaster API
GymMaster is all-in-one gym and health-club management software covering membership, billing, 24/7 door access, point of sale, and class scheduling for clubs in over 110 countries. Its Member Portal and Gatekeeper APIs let you programmatically pull members, classes, bookings, memberships, outstanding balances, and door-access events—and push signups, payments, bookings, and swipe validations back into GymMaster—but access is gated behind a paid account and per-site API keys issued from Settings > Integrations.
What is GymMaster?
GymMaster is all-in-one gym and health-club management software, distinguished by built-in 24/7 Bluetooth door access. Clubs use it to manage memberships, run integrated billing and payment processing, control 24/7 access, sell products through point of sale, and handle online booking for classes and personal training. The platform serves clubs across more than 110 countries, with 180,000+ active weekly users managing over 3 million memberships.
Core product areas include:
- Membership management and member profiles, agreements, and contracts
- Integrated billing and payment processing, including outstanding balances and external transactions
- 24/7 access control with Bluetooth door readers, plus the Gatekeeper API for third-party hardware
- Online booking and scheduling for classes, services, equipment, rooms, and staff-led sessions
- Point of sale, inventory, online signups, lead management, and retention/marketing automation
Common data entities:
- Members, Profiles, Visits, Measurements, Progress Photos, Questionnaires
- Memberships, Agreements, Contracts, Benefit Balances, Suspensions
- Classes, Bookings, Services, Resources, Attendee Lists
- Outstanding Balances, Payments, Products, Promotions, Signatures
- Doors, Membership Types, Swipes, Access Logs, Companies/Sites
The GymMaster Integration Challenge
GymMaster does publish a Member Portal API and a Gatekeeper API, but turning them into a reliable, full-coverage automation layer for a club is non-trivial:
- Paid-account gating: API keys are issued per site from Settings > Integrations, so access is tied to an active paid GymMaster subscription rather than open developer signup
- Split API surfaces: Member Portal and Gatekeeper are separate APIs with different base paths, versions, and auth schemes—you stitch them together to cover both membership and door-access workflows
- Two authentication models: an integration vs. staff API key for the portal, plus per-member login tokens that expire roughly hourly, alongside HTTP basic auth (site name + apikey) for Gatekeeper
- Short-lived tokens: member login tokens are time-limited, so headless jobs must handle re-authentication and token refresh cleanly
- Multi-site and access tiers: companies/sites, plus member-, staff-, and public-level endpoints, mean entitlements and scopes vary per request
- Access-control semantics: the swipe decision (whether to grant entry) and the access log (whether entry happened) are distinct, requiring careful sequencing for audit-grade door automation
How Supergood Creates GymMaster APIs
Supergood wraps GymMaster's Member Portal and Gatekeeper APIs—and the authenticated flows behind your account—into a single resilient, normalized API layer scoped to your club's sites and entitlements.
- Manages integration and staff API keys plus member login tokens, handling expiry and refresh automatically
- Bridges Member Portal and Gatekeeper basic auth so membership and door-access data flow through one interface
- Normalizes responses across members, classes, bookings, payments, and swipes into consistent objects across sites
- Respects member-, staff-, and public-level access tiers and per-site entitlements for compliant access
Use GymMaster with AI agents: GymMaster MCP Server →
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your sites, the portal and Gatekeeper APIs you use, and your authentication model.
- Supergood Generates and Validates Your API
We deliver a production-ready GymMaster adapter tailored to your account keys, sites, and entitlements.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adaptation as GymMaster evolves.
API Endpoints
Authentication
/portal/api/v1/loginAuthenticate a member with email/password or member ID and receive a time-limited token for downstream portal calls.
Members
/membersFetch member records including profiles, tags, memberships, and visit history across one or more sites.
Bookings
/booking/classesList class schedules and seat availability and retrieve attendee lists across facility locations.
Bookings
/create_bookingBook or cancel a class, service, room, or staff-led session against checked resource availability.
Billing
/outstanding_balanceRetrieve outstanding balances and process payments, log external transactions, and assign credit to charges.
Access Control
/swipeValidate a member credential against door and membership rules to decide whether entry should be granted, then log the access event.
Use Cases
Sync members and memberships into your data stack
- Pull member profiles, visits, measurements, and progress photos into a single warehouse - Stream membership, agreement, and suspension changes to BI and retention tools - Reconcile member records across multiple sites and companies into a unified view
Automate class and service bookings
- List class schedules and seat availability across locations without portal clicks - Create and cancel bookings for classes, equipment, rooms, and staff-led sessions - Pull attendee lists to drive check-in, capacity, and instructor workflows
Reconcile billing and payments
- Pull outstanding balances and post payments programmatically - Log external transactions and assign credit to the correct charges - Surface delinquent accounts and promotions to downstream finance and retention systems
Integrate third-party door access
- Validate member swipes against door and membership rules via the Gatekeeper API - Record access events to maintain an audit trail of granted and denied entries - Sync doors, membership types, and gym hours to external access hardware
Technical Specifications
Authentication
Member Portal integration/staff API keys plus member login tokens, and Gatekeeper HTTP basic auth (site name + apikey), all handled in a managed session
Connectivity
GymMaster Member Portal API (/portal/api/v1, v2) and Gatekeeper API (/gatekeeper_api/v2) over HTTPS, plus authenticated account flows where needed
Response format
Normalized JSON across members, memberships, classes, bookings, payments, and swipe/access objects
Rate limits
Adaptive throttling tuned to your site to stay within GymMaster's per-account limits
Session management
Automatic refresh of ~hourly member login tokens, API key handling, and credential rotation
Data freshness
Near real-time reads for members, bookings, and balances with optional scheduled batch syncs
Security
Encrypted credential vault, scoped access tokens, SOC 2-aligned controls, and audit logging
Webhooks
Event-style callbacks for signups, bookings, payments, membership changes, and door-access events
Latency
Sub-second reads on cached entities; multi-second writes when posting bookings, payments, and signups
Throughput
Horizontally scaled workers sized to multi-site member and access-event volume
Reliability
Retry, backoff, and idempotency keys for payments, bookings, and swipe logging
Adaptation
Continuous monitoring of GymMaster portal and Gatekeeper API releases and per-site configuration drift
Frequently asked questions
Yes. GymMaster issues API keys per site from Settings > Integrations, so an active paid GymMaster subscription is required. Supergood works with your existing account keys and authenticated sessions rather than any open developer program.
Yes. Supergood bridges the Member Portal API (memberships, classes, bookings, payments) and the Gatekeeper API (door access, swipes, access logs) behind one normalized interface, even though they use different base paths and auth schemes.
Member login tokens are time-limited, typically about an hour. Supergood manages re-authentication and token refresh automatically so headless jobs keep running without manual intervention.
Yes. The Gatekeeper API validates swipes against door and membership rules and logs access events, letting you connect external door readers while keeping GymMaster as the source of truth for entitlements.
Yes. GymMaster exposes companies and sites, and Supergood normalizes members, bookings, payments, and access events across all of them so multi-location operators integrate once.