Skip to main content
This is the complete tool list for both 1Club MCP servers. An assistant sees only the tools of the server it is connected to.

Admin server

https://mcp.1club.ai/admin - authenticated, normally with 1Club OAuth. Every tool is scoped to one organization and needs the listed scope. A call whose scope is missing fails with a permission error, not with empty data.
get_account needs no resource scope, so it works with any valid connection. That makes it the right first call when an assistant is behaving as if it has no access: if get_account succeeds, authentication worked and the problem is usually the granted scopes.
The website tools edit a draft. Every change is invisible to the public until publish_website runs, which is why publishing is its own scope. An assistant that holds website:write but not website:publish can build a page and hand you the preview URL, and cannot put it live. Read get_website_section_types before composing a page, and take image URLs from list_media rather than guessing them.supportedLocales and defaultLocale on update_website are the exception. They are organization-wide rather than website content, so they need organization:write as well and apply immediately instead of waiting for a publish - the same languages drive the member portal, the mobile app, and outbound email.
Anything sold by name takes two steps. Booking someone is search_contacts then create_booking; selling a membership is search_contacts, search_plans, then create_membership. Read the plan first and you know the real total, since a plan can charge a joining fee on top of its price. When a name matches more than one person or plan, the assistant should ask which you mean rather than guessing.

Reading the scope table

Scopes follow the resource:action format used across the Platform API. A connection carrying bookings:write does not automatically carry bookings:read; authorize both if the assistant should look a booking up as well as create one.

How a connection gets its scopes

The MCP client asks for a scope set, and you decide how much of that request to grant:
  • A client that requests nothing gets a read-only connection. Every read scope in the table above, and nothing that changes data.
  • Requested read scopes are granted when you approve. They are listed under “This assistant will be able to” on the authorization page.
  • Everything that is not a read is opt-in, one at a time. Each appears under “Also allow it to make changes?” as a checkbox that starts unchecked - the writes, and also media:delete and website:publish, which delete a file for good and make draft edits public. Approving the page without ticking any of them produces a read-only connection, even if the client asked for everything.
  • The set is fixed once approved. To add or remove a scope, revoke the connection and authorize it again - see Disconnect or revoke.
An assistant that authenticates with a Platform API key instead of OAuth uses that key’s scopes, which you edit on the token itself.
The wildcard scope * means “everything”, and the two credential types treat it differently. On a Platform API key it is stored as-is and satisfies every current and future scope. MCP OAuth accepts a request for * but never stores it: the wildcard is expanded into the concrete scopes that exist at that moment, so the authorization page can list each one and you can leave the destructive ones unticked. A connection therefore does not silently gain new powers as 1Club adds scopes - reconnect when you want the newer ones. For a key, explicit scopes are the better choice unless the integration is fully trusted and internally managed.
Each admin tool is a thin wrapper over the documented Platform API, so the request limits, error shapes, and field meanings are the same as the API reference.

Discovery server

https://mcp.1club.ai/discovery - no token, no scopes. These search the public 1club.me marketplace across every listed gym and read only published information. These tools take marketplace ids, which are not the same as the ids an assistant sees on the admin server. Do not mix ids between the two servers.

What is not exposed

The admin server is built strictly on the documented Platform API, so anything that API does not cover is unreachable through MCP today. That currently includes messaging and the inbox, automations and promotions, invoices and payments, access control, and reporting. Contacts and memberships are readable and creatable but not deletable. Instructors are read-only and are configured in 1Club. Plans and individual class occurrences can be managed through their write tools; recurring-series creation remains in the 1Club dashboard. Media can be registered but not uploaded: create_media records a file that is already hosted, so putting a new image online still happens in 1Club or through your own hosting. Products and product categories can be created, edited, and retired, but not deleted - deleting a product destroys its sales history. Stock is read-only: get_product_availability reports how many are left to sell, while booking a delivery in, correcting a count after a stocktake, and writing off damaged stock stay in the 1Club dashboard. See Products. If you need one of these, the Platform API is where coverage grows first, and MCP follows it.