openapi: 3.0.3 info: title: Wahoo Cloud Permissions API description: The Wahoo Cloud API connects Wahoo Fitness users to mobile and web applications. OAuth 2.0 (with PKCE option) authorizes access to user profiles, workouts, workout summaries, FIT-file uploads, structured workout plans, GPS routes, and cycling power zones. Webhooks deliver workout_summary notifications when offline_data scope is granted. version: v1 contact: name: Wahoo Developer Support email: wahooapi@wahoofitness.com url: https://developers.wahooligan.com termsOfService: https://www.wahoofitness.com/wahoo-api-agreement servers: - url: https://api.wahooligan.com description: Production security: - OAuth2: [] tags: - name: Permissions description: Revoke OAuth app access. paths: /v1/permissions: delete: tags: - Permissions summary: Revoke App Access operationId: revokeAppAccess security: - OAuth2: [] responses: '204': description: Permissions revoked for the calling app/user. components: securitySchemes: OAuth2: type: oauth2 description: OAuth 2.0 Authorization Code (with PKCE option for public apps). Access tokens are bearer tokens with a 2-hour TTL; refresh tokens are single-use. Starting 2026-01-01, apps are limited to 10 unrevoked access tokens per user. flows: authorizationCode: authorizationUrl: https://api.wahooligan.com/oauth/authorize tokenUrl: https://api.wahooligan.com/oauth/token refreshUrl: https://api.wahooligan.com/oauth/token scopes: email: Access the user's email address user_read: Read user profile user_write: Update user profile workouts_read: Read workouts and summaries workouts_write: Create/update/delete workouts and uploads offline_data: Receive webhook events while the app is closed plans_read: Read workout plans plans_write: Manage workout plans power_zones_read: Read cycling power zones power_zones_write: Manage cycling power zones routes_read: Read GPS routes routes_write: Manage GPS routes externalDocs: description: Wahoo Cloud API Reference url: https://cloud-api.wahooligan.com/