# Meso — API & integration

> Scoped index for integrating with the Meso API and agent surfaces. Meso is a periodized strength-training program that designs and rebuilds block-periodized programs. See the site-wide index at https://meso.fitness/llms.txt.

**Status:** The Meso web app is available now. This HTTP API and its OAuth server are in development and not yet publicly available; the descriptions below are authoritative and published now. Public read-only operations need no auth; member-scoped operations use an OAuth 2.1 bearer token.

## Describe the surface

- [OpenAPI 3.1 spec](https://meso.fitness/openapi.json) — endpoints, typed params, response/error schemas, OAuth scopes.
- [API catalog (RFC 9727)](https://meso.fitness/.well-known/api-catalog) — linkset to the spec, docs, and auth metadata.
- [Developer portal](https://meso.fitness/developers.html) — quickstart, sandbox, errors, endpoint table.

## Call it as an agent

- [MCP server card](https://meso.fitness/.well-known/mcp/server-card.json) — Streamable-HTTP tools (get_program, log_set, swap_exercise, set_equipment_mode, plus public tools).
- [A2A agent card](https://meso.fitness/.well-known/agent-card.json) — public capabilities (pricing, methodology, program design).
- [Agent skills index](https://meso.fitness/.well-known/agent-skills/index.json) — capability index with when-to-use guidance.

## Authenticate

- [Auth walkthrough](https://meso.fitness/auth.md) — start here.
- [Protected-resource metadata (RFC 9728)](https://meso.fitness/.well-known/oauth-protected-resource)
- [Authorization-server metadata (RFC 8414)](https://meso.fitness/.well-known/oauth-authorization-server)

## Key facts

- Base URL (in development): https://api.meso.fitness — sandbox: https://sandbox.api.meso.fitness
- Scopes: program:read, program:write, logs:write, profile:read
- Errors: JSON with `error.code`, `error.message`, `error.hint`.
- Contact: hello@meso.app