Undocumented endpoint in foods API

[jbell1329]

I've been looking through the documentation for the Food and Water API at https://dev.fitbit.com/build/reference/web-api/food-logging and https://dev.fitbit.com/build/reference/web-api/explore/#/ and was searching for a way to get a list of the current user's custom foods.

The documentation specifies 'Create Food' and 'Delete Custom Food' endpoints, but no 'Get Custom Foods' endpoint.

Create Food - POST https://api.fitbit.com/1/user/[user-id]/foods.json 

Delete Custom Food - DELETE https://api/fitbit.com/1/user/[user-id]/foods/[food-id].json

The API does respond to GET https://api.fitbit.com/1/user/[user-id]/foods.json with a list of custom foods, but this isn't a documented endpoint.

Just wondering if it's safe to use this endpoint, or if it's undocumented as it's likely to change at some point in the future?

Thanks,

Joe

[JohnFitbit]

Hi @jbell1329,

Good find! I'll need to reach out to engineering to get more information. I'll let you know once I find anything out.

Let me know if you have any questions in the meantime.

[jl__]

It looks like this undocumented API is no longer accessible (403 "The caller does not have permission"). It would be difficult/infeasible to manage custom foods without this or a similar API (can't rely on storing IDs because the user could unlink/relink their account).

I'd like to formally request to make this API available to 3rd party developers.