Read-only, user-delegated access to a user's Tesseta data — workouts, nutrition,
medications & adherence, labs & metrics. Access is granted by the user over
OAuth 2.0 Authorization Code with PKCE and scoped per domain
(workouts:read, labs:read, …); every grant is individually revocable.
Bootstrap your OAuth client from the discovery document at
/.well-known/oauth-authorization-server (access tokens are RS256 JWTs;
validate against /oauth/jwks.json). Prefer to click through the flow?
Use the live Swagger UI. The
machine-readable contract is openapi.yaml
— pin it in your codegen.