/api/oauth/v2/activityList

Download a list of activities for the authorized user.

• startDate (query) — UTC ISO date string to start the list; if omitted the newest activity is returned first.
• pageSize (query, limit) — Maximum number of activities to return (default 500, min 50, max 1000).
• extendedSummary (query) — Set to 1 to include an extended summary with extra metrics.

/api/oauth/v2/activity/{activityId}

Download detailed information for a single activity.

• activityId (path, required) — Identifier of the activity to retrieve.
• extraValues (query) — Set to '1' to include additional aggregated values (efficiency scores, effort, etc.).
• allSeries (query) — Set to '1' to return every time‑series delivered by the device.
• withLaps (query) — Set to '1' to include lap information in the response.

/api/oauth/v2/activity/update/{activityId}

Update mutable fields (title, notes) of an existing activity.

• activityId (path, required) — Identifier of the activity to update.

/user/oauth/v2/token

Exchange an authorization code or refresh token for an access token (or rotate a PKCE token).

• grant_type (query, required) — Either "authorization_code" or "refresh_token".
• code (query) — Authorization code returned from the authorization endpoint (required when grant_type=authorization_code).
• refresh_token (query) — Refresh token obtained earlier (required when grant_type=refresh_token).
• code_verifier (query) — PKCE code verifier (required if PKCE was used in the authorization request).
• client_id (query) — Client identifier (required if PKCE was used).
• Authorization (header) — Basic auth header containing base64‑encoded client_id:client_secret (omit when using PKCE).