Home / Developers
Developers · API

Build on Venue Manager with a secure, scoped API.

Connect your own app, CRM, ERP or booking flow to Venue Manager. Create API keys in Settings › Developers and choose, for each product, whether a key can read, read and write, or do nothing.

Scoped API keysPer-product accessFollows your planFull docs
ILLUSTRATIVE
Request200 OK
# Slots booked on one day in one space curl "https://www.sporfy.com/vm/v1/spaces/SP1/slots?date=2026-11-02" \ -H "X-App-Id: vmapp_7Q2…" \ -H "X-App-Secret: ••••••••"
Key · Front-desk syncLive
Slots · Read & writeClasses · ReadExpires in 90 days
Last used · 2 min agoIP allowlist
ResponseJSON
{ "date": "2026-11-02", "slots": [ … ] }
What you can build

Your systems, connected to your venue.

Bookings anywhereShow live availability and take bookings from your own app, kiosk or partner site.
Payments and linksList unpaid orders, send a payment link or record a payment from your own billing or accounting tool.
CRM and admissionsEnrol a student, with the parent's details, straight from your own forms or CRM.
Attendance from your appMark attendance in your own coach app and keep Venue Manager in step.
Lockers and rentalsHand out a locker or rental gear for a customer from your own counter app.
Member accessAdd members, sell plans and check memberships at your own gates, apps or partner venues.
API coverage

One API for the work you do every day.

Day-to-day work on Slots and Classes, plus customers. A key can read, read and write, or have no access, product by product. The API never deletes records and never changes how a product is set up.

Slots
  • Venues and courtsread
  • Bookingsread · write
  • Orders and paymentsread · write
  • Rentalsread · write
  • Lockersread · write
  • Slot membershipsread · write
  • Gamesread · write
Classes
  • Classes and batchesread
  • Studentsread · write
  • Feeswrite
  • Attendanceread · write
Customers
  • Find a customerread

EVERY ENDPOINT, WITH SAMPLES IN EIGHT LANGUAGES, IS IN THE API DOCS · SALES CAMPAIGNS, LIFESTYLE MEMBERSHIPS AND WHATSAPP SUPPORT ARE NOT IN THE API YET

01 · KEYS AND ACCESS

Keys you control, product by product.

Create keys in Settings › Developers. Each key is an App ID and an App Secret. Name it, choose Off, Read or Read & write for each product, set an expiry and an IP allowlist. The secret is shown once; rotate or revoke any key in one click.

  • Least accessOnly the scopes each key needs.
  • Shown onceSecrets are stored hashed.
  • Usage and logsRequests, errors and last use per key.
  • Role-basedOnly people who can manage organisation settings can create keys.
ILLUSTRATIVE
Settings › Developers3 keys
Front-desk syncLive
Accounting exportLive
Old kioskRevoked
New key · scopesPick
Slots · readSlots · writeClasses · readClasses · write
Requests · 7 daysUsage
M
T
W
T
F
S
S
02 · Follows your subscription

Available from Professional, on every product.

API access is set per product. A key can only use the products where your plan includes it.

Every productStandardProfessionalPremiumEnterprise
Developer API and keys—✓✓✓
MCP servers for AI agents—✓✓✓
Read and write scopes—✓✓✓
Usage and request logs—✓✓✓
Requests a minute—60120300+
Requests a day—5,00015,00050,000+
Calls at once—51025+

Plan changes apply on their own. If a product moves to Standard or its subscription ends, that product's calls pause on every key and MCP server (they answer 402), and other products keep working. Upgrade again and they resume, with no new keys needed.

Security

Built to be safe by default.

Org-scopedA key belongs to one organisation and never sees another's data.
Hashed secretsSecrets are stored hashed and shown only once.
IP allowlists and expiryLimit where a key works and for how long.
Usage logEvery call, by key and by person, without the customer details.
Rate limitsPer organisation, by plan, with limit headers in every response.
HTTPS onlyPlain http is refused. Answers are never cached, and keys work only on the API endpoints.
New · MCP

Prefer to ask an AI?

Create MCP servers from the same Developers area and run your venue from Claude, ChatGPT or any MCP-compatible agent.

FAQ

Developers, answered.

Which plans include the API?

Professional, Premium and Enterprise, set separately for each product. Standard plans do not include API access.

What happens if we downgrade?

Calls for the downgraded product pause on every key and MCP server and answer 402 plan_required. Nothing is deleted: keys stay in place and work again when you upgrade. You cannot create or change keys while the plan does not include it.

Can we test before going live?

Every product starts with a 15-day free trial of the plan you choose, and a trial on Professional or above includes developer access. Start with a key that can only read, then add write access when you are ready.

Who can create keys?

People whose role lets them manage organisation settings. Each key shows who created it, and every call is in the usage log.

Are there rate limits?

Yes, per organisation and by plan: Professional 60 requests a minute and 5,000 a day, Premium 120 and 15,000, Enterprise 300 and 50,000, with extra capacity as an add-on. Every answer carries X-RateLimit headers, and past a limit you get a 429 with Retry-After.

Get started

Build on Venue Manager.

Start a 15-day free trial on Professional and create your first API key in minutes.

Book a demoStart free trial