openapi: 3.0.3 info: title: WellnessLiving Appointments Classes API description: Curated, representative subset of WellnessLiving's official production API (RESTful, JSON-over-HTTPS). WellnessLiving is business-management software for fitness studios, gyms, spas, and salons; this API is the same one its own web and mobile clients (Achieve, Elevate) call, and is published for approved partners via an official OpenAPI document at github.com/wellnessliving/openapi (324 paths across 45+ resource areas as of the 2026-06-20 build). Endpoints below are grounded in that official spec and in the public github.com/wellnessliving/wl-sdk (PHP) and wl-sdk-js SDKs; this file selects roughly four representative endpoints per logical API area rather than reproducing the full catalog. Every WellnessLiving API resource is a `.json`-suffixed endpoint whose path is derived deterministically from the SDK model class's namespace (e.g. the PHP class `WellnessLiving\Wl\Staff\StaffElementModel` serves `/Wl/Staff/StaffElement.json`). Legacy numbered variants of several endpoints exist for backward compatibility (e.g. `Finish47`, `ServiceList52`, `Purchase72`) and are omitted here in favor of their current unsuffixed counterpart. version: 1.1.20260620071011 contact: name: WellnessLiving Support email: support@wellnessliving.com url: https://www.wellnessliving.com/support license: name: Proprietary url: https://www.wellnessliving.com/knowledge-sharing/terms-of-use/ termsOfService: https://www.wellnessliving.com/knowledge-sharing/terms-of-use/ servers: - url: https://us.wellnessliving.com description: Production - United States data center - url: https://au.wellnessliving.com description: Production - Australia data center - url: https://staging.wellnessliving.com description: Staging (pre-release QA branch) - url: https://demo.wellnessliving.com description: Demo/trunk (active development branch) security: - BearerAuth: [] tags: - name: Classes paths: /Wl/Classes/ClassList/List.json: get: operationId: get_Wl_Classes_ClassList_List summary: Returns list of classes and events in the business. description: 'Used by import and integration tools to enumerate all classes and events offered by a business. In franchise mode, classes from all franchisee locations are included. Results are sorted by title and start date.' tags: - Classes parameters: - $ref: '#/components/parameters/XErrorRules' - name: a_class_tab in: query required: false schema: type: array nullable: true items: type: string description: 'List of tabs keys. Filtering by Book Now Tab is not supported if `is_franchise` is `true`. `null` if no filtering by Book Now Tab is required.' - name: id_class_tab in: query required: false schema: type: string description: Enumerated/coded value (see WellnessLiving *Sid constant classes). description: 'ID of book now tab. One of [TabSid](#/components/schemas/Wl.Classes.Tab.TabSid) constants. Only [TabSid::TRAINING](#/components/schemas/Wl.Classes.Tab' - name: is_enrollment_block_all in: query required: true schema: type: boolean description: 'Whether all events should be returned from same enrollment block. * `true` to return all events from same enrollment block. * `false` to return only' - name: is_enrollment_block_empty in: query required: true schema: type: boolean description: 'Whether to include events without sessions. An empty event is neither published nor unpublished. It simply has no sessions. Such events can be useful' - name: is_event_include in: query required: true schema: type: boolean description: 'Whether to include events in the result. true` to include both classes and events. false` to include only classes.' - name: is_franchise in: query required: true schema: type: boolean description: 'Whether to return franchisee-created classes (if business is franchisor). `true` to include franchisee-created classes.' - name: k_business in: query required: true schema: type: string description: Business key. responses: '200': description: Successful response. content: application/json: schema: type: object properties: a_class: description: The `a_class` field. nullable: true '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '422': $ref: '#/components/responses/ValidationError' '500': $ref: '#/components/responses/ServerError' /Wl/Classes/ClassView/Element.json: get: operationId: get_Wl_Classes_ClassView_Element summary: Returns class information including schedules, images, and booking settings for the specified business. description: 'Used by import tools to read the full class catalog for a business. Returns a map of all classes (or a single class) with the information needed to replicate class data in an external system: schedules, images, booking constraints, and descriptions.' tags: - Classes parameters: - $ref: '#/components/parameters/XErrorRules' - name: i_image_height in: query required: true schema: type: integer description: 'The image height in pixels. Specify this value if you need the image to be returned in a specific size. If this value isn''t specified, the returned im' - name: i_image_width in: query required: true schema: type: integer description: 'The image width in pixels. Specify this value if you need the image to be returned in a specific size. If this value isn''t specified, the returned ima' - name: k_business in: query required: true schema: type: string description: The business key. - name: k_class in: query required: true schema: type: string description: 'The class key used to get information for a specific class. An empty value returns information for all classes of the business.' - name: show_cancelled in: query required: true schema: type: boolean description: 'Defines if canceled schedules should be included in the result. If `true`, canceled schedules will be shown. Otherwise, this will be `false`.' responses: '200': description: Successful response. content: application/json: schema: type: object properties: a_class_list: description: The `a_class_list` field. nullable: true '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '422': $ref: '#/components/responses/ValidationError' '500': $ref: '#/components/responses/ServerError' /Wl/Schedule/ClassList/ClassList.json: get: operationId: get_Wl_Schedule_ClassList_ClassList summary: Retrieves a list of classes and class information for the given business and date range. description: 'Returns upcoming class sessions for a business, with optional filtering by location, day of week, time of day, staff member, and virtual or in-person mode. The result includes per-session details such as staff, capacity, booking counts, and virtual locations, as well as a calendar map indicating which dates have at least one scheduled session.' tags: - Classes parameters: - $ref: '#/components/parameters/XErrorRules' - name: a_class in: query required: true schema: type: array items: type: string description: 'The list of classes keys to filter. Return sessions with matching class IDs. If it''s empty, all classes/events will be returned.' - name: a_day in: query required: true schema: type: array items: type: string description: 'Class filter by day of the week. Array of number representing the days of the week. Return sessions matching the given weekdays. (7 = Sunday, 1 = Mond' - name: a_location in: query required: true schema: type: array items: type: string description: 'The list of location keys to filter results. If it''s empty, schedule for all locations will be returned. All given locations should be from the same b' - name: a_time in: query required: true schema: type: array items: type: string description: 'Class filter by time of day. List of arrays with start and end time in "HH:MM" format (24h). Include sessions that start between the specified time ra' - name: dt_date in: query required: true schema: type: string description: The list start date in UTC and in MySQL format. - name: dt_end in: query required: true schema: type: string description: The list end date in UTC and in MySQL format. - name: is_response_short in: query required: true schema: type: boolean description: '`true` means to not generate `a_session` result. Can be used, if you do not need full information about existing classes and result in `a_calendar` is' - name: is_tab_all in: query required: true schema: type: boolean description: 'If `true`, sessions from every class tab are returned. If `false`, use the `k_class_tab` value.' - name: is_virtual in: query required: false schema: type: boolean nullable: true description: 'Class filter by type. The class is virtual. `true`: Only virtual classes. `false`: Only in-person. `null` or not set: No filtering.' - name: k_business in: query required: true schema: type: string description: The business key. - name: k_class_tab in: query required: true schema: type: string description: 'The category tab key. This will be `null` if not set yet. This will be ignored if `is_tab_all` is `true`.' - name: s_staff in: query required: true schema: type: string description: 'The list of staff members to filter. A comma separated list of staff keys.' - name: s_staff_uid in: query required: true schema: type: string description: 'The list of staff user keys to filter. A comma separated list of staff user keys.' - name: show_cancel in: query required: true schema: type: boolean description: If `true`, canceled sessions will be returned. If `false`, canceled sessions won't be returned. - name: show_class in: query required: true schema: type: boolean description: If `true`, classes will be included in the response. `false` - otherwise. - name: show_event in: query required: true schema: type: boolean description: If `true`, events are also returned. If `false`, only classes are returned. - name: uid in: query required: true schema: type: string description: The user key. responses: '200': description: Successful response. content: application/json: schema: type: object properties: a_calendar: description: The `a_calendar` field. nullable: true a_session: description: The `a_session` field. nullable: true is_timezone_different: description: The `is_timezone_different` field. nullable: true is_virtual_service: description: The `is_virtual_service` field. nullable: true '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '422': $ref: '#/components/responses/ValidationError' '500': $ref: '#/components/responses/ServerError' /Wl/Schedule/Cancel.json: post: operationId: post_Wl_Schedule_Cancel summary: 'Cancels session for the client. This method is an alias for partners using the API or SDK.' description: 'Identical in behavior to `get()`; exists as a POST alias for partner integrations that cannot issue GET requests.' tags: - Classes parameters: - $ref: '#/components/parameters/XErrorRules' - name: dt_date in: query required: true schema: type: string description: The date of the session in UTC. - name: is_backend in: query required: true schema: type: boolean description: 'This will be `true` if the API is being used from the back end. Otherwise, this will be `false`. Here, the back end refers to either a staff member or' - name: is_late_cancel in: query required: true schema: type: boolean description: '`true` is late cancel, `false` reservation is not late cancel. This is required to enable late cancel even if the user is staff.' - name: k_appointment in: query required: false schema: type: string nullable: true description: 'The appointment key. This will be `null` if not set yet or if a class or event is canceled.' - name: k_business in: query required: true schema: type: string description: Key of the business within which the action is performed. - name: k_class_period in: query required: false schema: type: string nullable: true description: 'The class period key. This will be `null` if not set yet or if an appointment is canceled.' - name: uid in: query required: true schema: type: string description: The user key. responses: '200': description: Successful response. content: application/json: schema: type: object properties: status: type: string '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '422': $ref: '#/components/responses/ValidationError' '500': $ref: '#/components/responses/ServerError' components: parameters: XErrorRules: name: X-Error-Rules in: header required: false schema: type: string description: Opt in to mapping internal API error statuses to real 4xx HTTP codes. By default the API always answers HTTP 200 even on error, with the failure encoded in the JSON body; setting this header (e.g. to `default`) makes the gateway translate matched error statuses to 400/403/404 responses instead. responses: ServerError: description: Unexpected server error. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' ValidationError: description: The request payload failed field-level validation. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' Unauthorized: description: Missing, expired, or invalid Bearer token / session. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' BadRequest: description: 'Client-side error: invalid input, failed validation, throttling, or other request error (only returned as an HTTP status when `X-Error-Rules` opts in; otherwise encoded in a 200 body).' content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' NotFound: description: The requested resource does not exist. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' Forbidden: description: Authenticated but not permitted to access this business, location, or resource. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' schemas: ErrorResponse: type: object description: Standard WellnessLiving API error response shape. properties: status: type: string description: Machine-readable status/error code string (e.g. `access-denied`, `not-found`). text_message: type: string description: Human-readable error message. a_field: type: object additionalProperties: true description: Per-field validation errors, when the failure is a 422-style validation error. securitySchemes: BearerAuth: type: http scheme: bearer bearerFormat: JWT description: 'The officially published OpenAPI declares a JWT Bearer scheme: sign in via `POST /Core/Passport/Login/Enter/Enter.json`, then mint a token with `GET /Core/Passport/Enter/Jwt/JwtToken.json` and send it as `Authorization: Bearer `. The underlying PHP/JS SDKs additionally support the legacy scheme: a registered Application ID + secret code sign a per-request HMAC (SHA3-based) placed in the `Authorization:` header alongside session cookies established by the `Notepad`/`Enter` model pair. Both schemes require WellnessLiving''s Integrations Team to first approve API access, sign an NDA and API Agreement, and issue application credentials.'