Authentication
Send the MMKX-API-KEY. Your Skool credentials (client ID + auth token) are set once on
the connection page in the Magic Meal Kits app and resolved server-side, so no per-request
credential headers are needed. Each request still passes a group identifier:
x-skool-group-name for the read endpoints (members, classrooms) and x-skool-group-id
for the course-permission endpoints — see Authentication. All endpoints
require a Basic license and are rate limited.
Endpoints
| Endpoint | Tier | What it does |
|---|---|---|
GET /skool/members | Basic | List members (paginated) |
GET /skool/classrooms | Basic | List classrooms (courses) |
GET /skool/member-courses | Basic | A member’s course permissions |
POST /skool/member-courses | Basic | Grant/revoke one course permission |
POST /skool/member-courses/bulk | Basic | Grant/revoke for many members at once |
Notes
- Rate limits apply per endpoint (e.g. members/classrooms ~3 req / 10 s; bulk ~1 req / 20 s) — space out calls and prefer the bulk endpoint for large updates.
memberIDcomes from the members list; passclassroomIDto scope a permission to a specific course.

