Frequently asked questions about the API

Does using the API cost anything?

No, not for personal keys, reading, exports and read-only MCP. Organization keys, writing and webhooks are Premium (details).

Who can create a key?

Any adult account for themselves. For an organization only people with leadership rights in that organization (and Premium). Child and youth accounts never.

Why do I get 404 although the club exists?

Because the person behind the key may not see it, or the key is bound to a different organization. This is intended: invisible things never answer 403, so their existence cannot be guessed. Check GET /ext/me for memberships and the slug.

What does 403 `INSUFFICIENT_SCOPE` mean?

The key lacks the scope of the route. Scopes cannot be changed afterwards: create a new key with the required scopes.

Why does the member list contain no email addresses?

Contact data is encrypted and deliberately not returned through the interface. This protects members and you from unintended disclosure.

How do I handle time zones?

Times are ISO 8601 with time zone (UTC). Convert to your club’s local time for display; recurring events are computed in local time so they do not shift by an hour after a clock change.

Why does the webhook contain no event data?

So that no personal data flows unchecked to third parties. You fetch the details with your key; the person’s rights apply. See webhooks.

Is there a test environment (sandbox)?

There is no dedicated sandbox yet. The console works with your own key against the platform; read calls are harmless. Test write access first with a key for a test organization you create for that purpose.

Is there OAuth (“Sign in with CLUP.life”)?

Not yet. Currently there are API keys. OAuth 2.1 with PKCE is planned for services that want to offer “Connect with CLUP.life”.

Can I change contributions, donations or roles via the API?

No. Write access exists only for events, announcements and tasks — that is, without new personal data and without financial or rights effects.

Support#

Can’t find an answer, or something behaves differently than described? Contact support. Please include the route, the HTTP status and the code of the response — never your key.

Status#