companyId, and report DTOs do not expose individual clients,
bookings, invoices, payment IDs, coach IDs, or provider payloads.
Scopes
Attendance summary
attendance_summaries:read
Validation:
Default range: last 30 days. Maximum range: 366 days.
Response fields:
Revenue summary
revenue_summaries:read
Validation:
Default range: last 30 days. Maximum range: 366 days. Only
Invoice documents
are included; credit notes are excluded.
Response fields:
Not exposed: invoice numbers, client IDs, payment IDs, payment-provider
payloads, line items, PDFs, billing-profile snapshots, or email history.
Retention summary
retention_summaries:read
Response fields:
Not exposed: client identity, email, phone, assigned coach, exact lifecycle
timeline, archive reasons, deletion metadata, or private notes.
Rate limits
Report endpoints use the standard Public API client rate limit: 10 requests per second per OAuth client. Responses include the standardRateLimit-* and
X-RateLimit-* headers documented in Contracts.