cURL

curl -X PATCH "https://api.fitsociety.io/public/v1/workout/performance/sessions/{sessionId}/supersets/{groupId}/exercises" \
  -H "Authorization: Bearer <access_token>" \
  -H "Idempotency-Key: <stable_request_key>" \
  -H "Content-Type: application/json" \
  -d '{}'

const options = {
  method: 'PATCH',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    performanceId: '67f1234567890abcdef1234',
    exerciseId: '67f1234567890abcdef1234',
    clientId: '67f1234567890abcdef1234'
  })
};

fetch('https://api.fitsociety.io/public/v1/workout/performance/sessions/{sessionId}/supersets/{groupId}/exercises', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.fitsociety.io/public/v1/workout/performance/sessions/{sessionId}/supersets/{groupId}/exercises"

payload = {
    "performanceId": "67f1234567890abcdef1234",
    "exerciseId": "67f1234567890abcdef1234",
    "clientId": "67f1234567890abcdef1234"
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "sessionId": "67f1234567890abcdef1234",
    "groupId": "6a2b1c3d4e5f60718293a4b5",
    "exerciseCount": 3,
    "exercises": [
      {
        "performanceId": "67f1234567890abcdef1234",
        "exerciseId": "67f1234567890abcdef1234",
        "order": 0
      }
    ]
  },
  "meta": {
    "requestId": "4f849d7d-f4f1-45cc-b4b7-3984a3d17f83",
    "rateLimit": {
      "limit": 10,
      "remaining": 9,
      "resetSeconds": 1
    },
    "idempotency": {
      "replayed": false
    }
  }
}

Sessions and performance

Add an exercise to a session superset (freestyle)

Freestyle (performance-based) equivalent of the plan-day add-to-superset. Adds an exercise to an existing session superset. Accepts EITHER performanceId (an existing standalone session performance, which is regrouped) OR exerciseId (a catalog Exercisev2 id, added as a new performance). If both are supplied, performanceId wins. The movement must not already be in the superset, and there is no maximum number of exercises per superset.

Requires the workout_sessions:write scope. This operation maps to /app/v1/workout/performance/sessions/:sessionId/supersets/:groupId/exercises and retains its Workout V2 permission, feature-flag, and resource-scope checks.

The clientId path parameter is resolved inside the company bound to the Public API token when present.

PATCH

/

public

/

v1

/

workout

/

performance

/

sessions

/

{sessionId}

/

supersets

/

{groupId}

/

exercises

cURL

curl -X PATCH "https://api.fitsociety.io/public/v1/workout/performance/sessions/{sessionId}/supersets/{groupId}/exercises" \
  -H "Authorization: Bearer <access_token>" \
  -H "Idempotency-Key: <stable_request_key>" \
  -H "Content-Type: application/json" \
  -d '{}'

const options = {
  method: 'PATCH',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    performanceId: '67f1234567890abcdef1234',
    exerciseId: '67f1234567890abcdef1234',
    clientId: '67f1234567890abcdef1234'
  })
};

fetch('https://api.fitsociety.io/public/v1/workout/performance/sessions/{sessionId}/supersets/{groupId}/exercises', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.fitsociety.io/public/v1/workout/performance/sessions/{sessionId}/supersets/{groupId}/exercises"

payload = {
    "performanceId": "67f1234567890abcdef1234",
    "exerciseId": "67f1234567890abcdef1234",
    "clientId": "67f1234567890abcdef1234"
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "sessionId": "67f1234567890abcdef1234",
    "groupId": "6a2b1c3d4e5f60718293a4b5",
    "exerciseCount": 3,
    "exercises": [
      {
        "performanceId": "67f1234567890abcdef1234",
        "exerciseId": "67f1234567890abcdef1234",
        "order": 0
      }
    ]
  },
  "meta": {
    "requestId": "4f849d7d-f4f1-45cc-b4b7-3984a3d17f83",
    "rateLimit": {
      "limit": 10,
      "remaining": 9,
      "resetSeconds": 1
    },
    "idempotency": {
      "replayed": false
    }
  }
}

Authorizations

Authorization

string

header

required

Public API access token issued by /public/v1/oauth/token. Example: Authorization: Bearer fspt_.... Each resource request rechecks the token company's current provider access. Disabling access blocks existing tokens with 403 auth.provider_unavailable.

Headers

Idempotency-Key

string

required

Required for Public API write requests. Reusing the same key with the same method, path, and body replays the stored successful response; reusing it with a different request returns 409 idempotency.conflict.

Required string length: 1 - 200

Example:

"booking-create-20260714-001"

Path Parameters

sessionId

string

required

Workout session id.

Example:

"67f1234567890abcdef1234"

groupId

string

required

Target superset group id.

Example:

"67f1234567890abcdef1234"

Body

application/json

performanceId

string

Existing standalone session performance to regroup. Takes precedence over exerciseId.

Example:

"67f1234567890abcdef1234"

exerciseId

string

Catalog Exercisev2 id to add as a new performance in the superset.

Example:

"67f1234567890abcdef1234"

clientId

string

Example:

"67f1234567890abcdef1234"

Response

Updated superset members.

data

object

required

Show child attributes

meta

object

required

Show child attributes