> ## Documentation Index > Fetch the complete documentation index at: https://docs.1club.ai/llms.txt > Use this file to discover all available pages before exploring further. # Update a booking policy > Edits a booking policy. Send only what changes; an omitted field is left alone. Lists (`clubIds`, `eventIds`, `cancellationRules`, `allowedProductCategoryIds`, `upsellPlanIds`) and the `validFor` and `audience` objects **replace** what is stored when sent - read the policy first and send the whole value you want. `null` clears a number or the audience. The same rules as on create apply, judged against the policy as it will stand: a new step must still divide the stored minimum slot. Changing `kind` clears what the other kind carried (an audience when it becomes an event policy, event ids when it becomes a booking policy). Bookings already made keep the cancellation terms they were made under. ## OpenAPI ````yaml /openapi-platform.json patch /v1/platform/booking-policies/{id} openapi: 3.0.0 info: title: 1club Platform API version: 1.0.0 description: >- The 1club Platform API lets you programmatically access and manage your organization's data. ## Official API Contract This documentation is the official source of truth for the 1club Platform API. If an integration relies on undocumented endpoints, fields, response shapes, or internal behavior outside this spec, we can't guarantee backward compatibility. Build against what's documented here to stay stable as the platform evolves. ## Authentication All requests require a customer API key passed as a Bearer token: ``` Authorization: Bearer 1club_sk_live_... ``` Generate API keys from the admin portal under **Settings > API Tokens**. The key is tied to your organization - all responses are scoped to your org's data. Agents and MCP connectors can instead send an OAuth access token (the `platformOAuth` scheme), requesting only the scopes the task needs. ## Rate Limiting - **100 requests per minute** per API key - When exceeded, the API returns `429 Too Many Requests` with a `Retry-After` header - Rate limit headers are included in every response: - `X-RateLimit-Limit` - max requests per window - `X-RateLimit-Remaining` - requests remaining - `X-RateLimit-Reset` - seconds until the window resets ## Errors | Status | Meaning | |--------|---------| | `400` | Invalid request parameters | | `401` | Missing or invalid API key | | `404` | Resource not found (or doesn't belong to your organization) | | `429` | Rate limit exceeded | | `500` | Internal server error | ## Versioning and deprecation The API is versioned in the path (`/v1`). Changes within a version are additive: new endpoints, new optional parameters and new response fields can appear at any time, so clients should ignore fields they do not recognise. A breaking change ships as a new version. An operation due to be removed is first marked `deprecated: true` in this spec and announced in the changelog at https://docs.1club.ai/changelog, with advance notice before it is withdrawn. contact: name: 1club API Support email: support@1club.ai servers: - url: https://api.1club.ai description: Production API security: - customerApiAuth: [] - platformOAuth: [] tags: [] paths: /v1/platform/booking-policies/{id}: patch: tags: - Booking Policies summary: Update a booking policy description: > Edits a booking policy. Send only what changes; an omitted field is left alone. Lists (`clubIds`, `eventIds`, `cancellationRules`, `allowedProductCategoryIds`, `upsellPlanIds`) and the `validFor` and `audience` objects **replace** what is stored when sent - read the policy first and send the whole value you want. `null` clears a number or the audience. The same rules as on create apply, judged against the policy as it will stand: a new step must still divide the stored minimum slot. Changing `kind` clears what the other kind carried (an audience when it becomes an event policy, event ids when it becomes a booking policy). Bookings already made keep the cancellation terms they were made under. operationId: updateBookingPolicy parameters: - in: path name: id required: true schema: type: integer description: 1club booking policy id - in: header name: Idempotency-Key schema: type: string maxLength: 255 description: >- Retry-safe key; a repeat of the same request replays the first response requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/PlatformBookingPolicyUpdate' responses: '200': description: The updated booking policy content: application/json: schema: $ref: '#/components/schemas/PlatformBookingPolicy' '400': $ref: '#/components/responses/PlatformBadRequest' '401': $ref: '#/components/responses/PlatformUnauthorized' '403': description: API key is missing the required `booking-policies:write` scope content: application/json: schema: $ref: '#/components/schemas/PlatformError' '404': $ref: '#/components/responses/PlatformNotFound' '429': $ref: '#/components/responses/PlatformRateLimited' security: - customerApiAuth: [] components: schemas: PlatformBookingPolicyUpdate: type: object description: >- Fields accepted when updating a booking policy. Send only what changes; an omitted field is left alone, and at least one is required. Lists and the validFor and audience objects replace what is stored. Unknown fields are rejected. minProperties: 1 additionalProperties: false properties: name: type: string minLength: 1 maxLength: 255 description: Internal name, shown to staff in the admin portal. kind: type: string enum: - booking - event description: >- `booking` (the default) governs bookings of courts, coaches and classes. `event` decides only what event tickets refund on cancellation, and takes no validFor or audience. clubIds: type: array items: type: integer maxItems: 500 description: >- Clubs the policy applies at. Empty means every club. Required on create. validFor: type: object nullable: true additionalProperties: false description: >- What the policy governs. No `scopes` means every booking. Each scope listed (`classes`, `areas`, `instructors`) takes in bookings of that kind, all of them unless its type list (`classTypes`, `areaTypes`, `instructorTypes`) narrows it; a type list must not be empty and must belong to a listed scope. null on a write is the same as `{}`. properties: scopes: type: array items: type: string enum: - classes - areas - instructors maxItems: 3 classTypes: type: array items: type: integer maxItems: 500 description: Class type ids, from GET /v1/platform/class-types. areaTypes: type: array items: type: integer maxItems: 500 description: Area type ids, from GET /v1/platform/area-types. instructorTypes: type: array items: type: integer maxItems: 500 description: Instructor type ids, from GET /v1/platform/instructor-types. eventIds: type: array items: type: integer maxItems: 500 description: 'Event policies only: the events it covers. Empty means every event.' audience: type: object nullable: true additionalProperties: false description: >- Who the policy governs. Every list set must match: a contact of one of `memberTypes`, carrying one of `tags`, holding one of `membershipPlanIds` (or a plan in `membershipPlanCategoryIds`), and so on. null means everyone. A policy with an audience never applies to an anonymous booking. properties: memberTypes: type: array items: type: string enum: - contact - member - staff - lead - lapsed - drop_in - archived maxItems: 20 tags: type: array items: oneOf: - type: string - type: integer maxItems: 50 membershipPlanIds: type: array items: type: integer maxItems: 50 membershipPlanCategoryIds: type: array items: type: integer maxItems: 50 pipelineStageIds: type: array items: type: integer maxItems: 50 sourceIds: type: array items: type: integer maxItems: 50 cancellationRules: type: array maxItems: 20 items: type: object required: - hoursInAdvance - refundPercentage additionalProperties: false properties: hoursInAdvance: type: number minimum: 0 maximum: 8760 description: >- Notice, in hours before the booking starts, this band requires. refundPercentage: type: number minimum: 0 maximum: 100 description: >- Share of the booking price refunded when the member cancels with at least that much notice. description: type: string maxLength: 500 description: >- The refund ladder. The first band whose notice the member met decides the refund; meeting none refunds nothing. `hoursInAdvance` must be distinct and refunds may not grow as the booking approaches. Empty is free cancellation at any time; every band at 0% is non-refundable (canonically one band, 0 hours at 0%). forcePayment: type: string enum: - none - at_booking - at_checkin description: >- `at_booking` sends members to an online card checkout before the booking is confirmed, and needs an online card payment provider at the policy clubs. `at_checkin` takes payment on arrival. chargeAdvanceDays: type: integer nullable: true minimum: 0 maximum: 365 description: >- Days before each occurrence of a recurring booking that its charge is written. null uses the platform default of 3. Not used while payment is taken at booking. minBookingSlotMinutes: type: integer nullable: true minimum: 0 description: >- Shortest booking allowed. A whole number of steps, and at most maxBookingSlotMinutes. maxBookingSlotMinutes: type: integer nullable: true minimum: 0 description: Longest booking allowed. bookingDurationStepMinutes: type: integer nullable: true enum: - 30 - 60 - null description: The step a booking length grows by. maxBookInAdvanceDays: type: integer nullable: true minimum: 0 description: How many days ahead members may book. null is no limit. minBookingNoticeHours: type: integer nullable: true minimum: 0 description: How late before the start members may still book. null is no limit. waiveNoticeWhenBooked: type: boolean description: >- Lift minBookingNoticeHours for a class someone has already booked, since it is confirmed to run. checkInRequired: type: boolean description: A booking not checked in by the end of the day is marked a no-show. autoCheckIn: type: boolean description: Check the booking in automatically when it starts. allowAnonymousBookings: type: boolean description: Staff may book without naming a contact. allowGuestBookings: type: boolean description: >- Logged-out visitors may book without an account or password, giving their details at checkout. allowWalkInCheckins: type: boolean description: Staff may check in a contact who has no booking. allowAnonymousCheckins: type: boolean description: Staff may check in a visitor with no contact record. allowedProductCategoryIds: type: array items: type: integer maxItems: 500 description: >- Product categories offered with the booking confirmation. Empty offers none. waitlistClaimWindowMinutes: type: integer nullable: true minimum: 0 description: >- Minutes the first person on a waitlist has to claim a place that opens shortly before a class. null uses the default of 15. upsellAvailablePlans: type: boolean description: Offer plans at booking. upsellPlanIds: type: array items: type: integer maxItems: 500 description: The plans offered at booking. PlatformBookingPolicy: type: object description: >- The rules a booking is held to: cancellation terms, payment timing, booking window, slot grid and check-in rules. Scoped on WHAT it governs (`validFor`) and WHO (`audience`), narrowed to `clubIds`; when several apply, the most specific wins. An `event` policy instead decides what event tickets refund. properties: policyId: type: integer name: type: string minLength: 1 maxLength: 255 description: Internal name, shown to staff in the admin portal. kind: type: string enum: - booking - event description: >- `booking` (the default) governs bookings of courts, coaches and classes. `event` decides only what event tickets refund on cancellation, and takes no validFor or audience. clubIds: type: array items: type: integer maxItems: 500 description: >- Clubs the policy applies at. Empty means every club. Required on create. validFor: type: object nullable: false additionalProperties: false description: >- What the policy governs. `{}` means every booking. Always `{}` on an event policy. properties: scopes: type: array items: type: string enum: - classes - areas - instructors maxItems: 3 classTypes: type: array items: type: integer maxItems: 500 description: Class type ids, from GET /v1/platform/class-types. areaTypes: type: array items: type: integer maxItems: 500 description: Area type ids, from GET /v1/platform/area-types. instructorTypes: type: array items: type: integer maxItems: 500 description: Instructor type ids, from GET /v1/platform/instructor-types. eventIds: type: array items: type: integer maxItems: 500 description: 'Event policies only: the events it covers. Empty means every event.' audience: type: object nullable: true additionalProperties: false description: >- Who the policy governs. null means everyone. Always null on an event policy. properties: memberTypes: type: array items: type: string enum: - contact - member - staff - lead - lapsed - drop_in - archived maxItems: 20 tags: type: array items: oneOf: - type: string - type: integer maxItems: 50 membershipPlanIds: type: array items: type: integer maxItems: 50 membershipPlanCategoryIds: type: array items: type: integer maxItems: 50 pipelineStageIds: type: array items: type: integer maxItems: 50 sourceIds: type: array items: type: integer maxItems: 50 cancellationRules: type: array maxItems: 20 items: type: object required: - hoursInAdvance - refundPercentage additionalProperties: false properties: hoursInAdvance: type: number minimum: 0 maximum: 8760 description: >- Notice, in hours before the booking starts, this band requires. refundPercentage: type: number minimum: 0 maximum: 100 description: >- Share of the booking price refunded when the member cancels with at least that much notice. description: type: string maxLength: 500 description: >- The refund ladder. The first band whose notice the member met decides the refund; meeting none refunds nothing. `hoursInAdvance` must be distinct and refunds may not grow as the booking approaches. Empty is free cancellation at any time; every band at 0% is non-refundable (canonically one band, 0 hours at 0%). forcePayment: type: string enum: - none - at_booking - at_checkin description: >- `at_booking` sends members to an online card checkout before the booking is confirmed, and needs an online card payment provider at the policy clubs. `at_checkin` takes payment on arrival. chargeAdvanceDays: type: integer nullable: true minimum: 0 maximum: 365 description: >- Days before each occurrence of a recurring booking that its charge is written. null uses the platform default of 3. Not used while payment is taken at booking. minBookingSlotMinutes: type: integer nullable: true minimum: 0 description: >- Shortest booking allowed. A whole number of steps, and at most maxBookingSlotMinutes. maxBookingSlotMinutes: type: integer nullable: true minimum: 0 description: Longest booking allowed. bookingDurationStepMinutes: type: integer nullable: true enum: - 30 - 60 - null description: The step a booking length grows by. maxBookInAdvanceDays: type: integer nullable: true minimum: 0 description: How many days ahead members may book. null is no limit. minBookingNoticeHours: type: integer nullable: true minimum: 0 description: How late before the start members may still book. null is no limit. waiveNoticeWhenBooked: type: boolean description: >- Lift minBookingNoticeHours for a class someone has already booked, since it is confirmed to run. checkInRequired: type: boolean description: A booking not checked in by the end of the day is marked a no-show. autoCheckIn: type: boolean description: Check the booking in automatically when it starts. allowAnonymousBookings: type: boolean description: Staff may book without naming a contact. allowGuestBookings: type: boolean description: >- Logged-out visitors may book without an account or password, giving their details at checkout. allowWalkInCheckins: type: boolean description: Staff may check in a contact who has no booking. allowAnonymousCheckins: type: boolean description: Staff may check in a visitor with no contact record. allowedProductCategoryIds: type: array items: type: integer maxItems: 500 description: >- Product categories offered with the booking confirmation. Empty offers none. waitlistClaimWindowMinutes: type: integer nullable: true minimum: 0 description: >- Minutes the first person on a waitlist has to claim a place that opens shortly before a class. null uses the default of 15. upsellAvailablePlans: type: boolean description: Offer plans at booking. upsellPlanIds: type: array items: type: integer maxItems: 500 description: The plans offered at booking. createdAt: type: string format: date-time updatedAt: type: string format: date-time PlatformError: type: object properties: error: type: string code: type: string description: >- A stable, machine-readable reason, when the error has one (e.g. `CONTACT_EXISTS`). details: type: object additionalProperties: true description: >- Structured values behind the error. A 409 naming an existing record carries its id here, e.g. `contactId`. responses: PlatformBadRequest: description: Invalid request (bad parameters, or a body that fails validation) content: application/json: schema: $ref: '#/components/schemas/PlatformError' PlatformUnauthorized: description: Invalid or missing API key content: application/json: schema: $ref: '#/components/schemas/PlatformError' PlatformNotFound: description: The requested resource does not exist in this organization content: application/json: schema: $ref: '#/components/schemas/PlatformError' PlatformRateLimited: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/PlatformError' securitySchemes: customerApiAuth: type: http scheme: bearer description: >- Organization-scoped bearer credential: a customer API key (1club_sk_live_...) or an MCP OAuth access token. platformOAuth: type: oauth2 description: >- OAuth 2.1 authorization code flow with PKCE (S256), as used by MCP connectors. Register a client dynamically (RFC 7591) at https://api.1club.ai/v1/mcp/oauth/register. Each scope grants one capability; request only what the integration needs. flows: authorizationCode: authorizationUrl: https://auth.1club.ai/oauth/authorize tokenUrl: https://api.1club.ai/v1/mcp/oauth/token scopes: '*': >- Full access - read and manage everything in this organization, including capabilities added later classes:read: View classes, class types, schedules and progression tracks classes:write: >- Create, reschedule, and cancel classes, and maintain the class types they are run as checkins:read: View check-ins checkins:write: Check people in, to a booking or on their membership content:read: View published content content:write: >- Create, edit and delete content - posts, FAQs, documents and reusable blocks website:read: >- View your website: pages, sections, layout, styles and publish history website:write: >- Edit your website - pages, sections, navigation and styles. Edits stay unpublished until published. website:publish: >- Publish your website, making unpublished edits visible to the public, and roll back to an earlier version media:read: View your media library media:write: >- Add images and videos to your media library and edit their names and descriptions media:delete: Permanently delete files from your media library clubs:read: View club information clubs:write: >- Edit your clubs' details - name, contact details, address, opening hours, amenities and sports. Live on your website, member portal, app and 1club.me at once; a club listed on 1club.me sends its listing's changes for review. transactions:read: View transactions, revenue reports and your chart of accounts transactions:write: >- Record revenue collected outside 1club, such as a marketplace payout for your bookings, and refunds of it. Nothing is charged to anyone. invoices:read: >- View your invoices - who they were issued to, their amounts and status - and how much was invoiced over a period areas:read: View areas, area types, blocks and availability areas:write: >- Create and update areas and area types, and block or unblock an area bookings:read: View bookings bookings:write: >- Create, change, reschedule and cancel bookings, and add or remove participants contacts:read: >- View contacts, their tags and custom field values, and your sales pipeline stages and sources contacts:write: >- Create and update contacts and tag them, and maintain your tags, smart tag rules and contact custom fields contacts:delete: >- Archive contacts, which cancels their active memberships and all their future bookings. Separate from creating and updating because those cancellations are not undone by restoring the contact. instructors:read: View instructors and their availability instructors:write: >- Create and update instructors (coaches) and the instructor types they are grouped by, including what members pay for a one-to-one session and how you pay the coach. Does not grant admin-portal access: an instructor created this way has no login and is never invited to your staff portal. plans:read: View plans and pricing plans:write: Create, edit and delete plans and plan categories memberships:read: View memberships memberships:write: >- Sell memberships, set their price and whether they are paid, and pause, resume or cancel them products:read: >- View the product catalogue and its categories, including prices and how many are left to sell products:write: Create and edit products and product categories forms:read: >- View your forms and their questions, and how many people have completed each. Not the answers themselves. forms:write: >- Create and edit forms and their questions, including sign-up forms that sell your plans and products. Forms are public as soon as they are created or changed. Does not delete forms. organization:write: >- Change organization-wide settings, which take effect immediately. That includes which languages you offer, across your website, the member portal, the mobile app and email, and what your clubs call their booking cards (private training, group activities, areas) wherever members book. revenue-accounts:write: >- Add accounts to your chart of accounts and edit them, including which one sales post to by default. Reading the chart needs no scope of its own - any of plans, products or transactions admits it. pricing-rules:read: >- View pricing rules - the surcharges, discounts and set prices applied when a booking is priced - and quote what a booking would cost pricing-rules:write: >- Create, edit, turn off and delete pricing rules. Changes apply to every booking priced afterwards. booking-policies:read: >- View booking policies: cancellation and refund rules, payment timing and booking windows booking-policies:write: >- Create, edit, duplicate and delete booking policies. Changes apply to every booking they cover from then on. document-rules:read: >- View document rules - which members are asked to sign or accept which documents, such as waivers document-rules:write: >- Create, edit and delete document rules, which decide who must sign or accept a document and whether it is required for entry templates:read: View your email and SMS templates templates:write: Create, edit and delete email and SMS templates events:read: View events, their tickets and how many are sold events:write: >- Create, edit, duplicate and delete events, and publish, unpublish or cancel them. Cancelling an event also cancels its attendees' bookings. messages:read: >- View messages sent to and received from your members, and their delivery status messages:write: >- Prepare draft messages to members. Drafts are never sent from here: someone at your club reviews and sends them from 1club. analytics:read: >- View statistics over a period - revenue, bookings, check-ins, how full your classes, courts and coaches were, memberships added and cancelled, and new members - as totals, never the people or sales behind them payment-methods:write: >- Add, rename and remove the payment methods staff record by hand, such as cash or a bank transfer, and choose which ones members may pick when paying for a booking. Reading them needs no scope of its own - transactions:read admits it. staff:read: >- View your staff accounts, their roles, and what each role is allowed to do staff:write: >- Change a staff member's role, and what the manager, front desk and instructor roles are allowed to do. Only a signed-in person can use it, with the same limits as in 1club: an API key is always refused. notifications:read: >- View which notifications each role gets by default, and on which channels notifications:write: >- Change which notifications each role gets and on which channels, and apply those defaults to everyone in a role, replacing their own choices ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.