An App Store Connect API key lets GroupApp securely connect to your Apple Developer account and authenticate the access needed to build, sign, and publish your branded app. It works alongside your Issuer ID and Key ID.
In most cases, the GroupApp team can create and manage the API key for you. However, your organization may require you to create and share the API credentials directly.
Please Note
If you're using an Individual (personal) membership, you may not be able to grant the GroupApp team access to the resources needed for code signing. Contact us before proceeding so we can discuss your options.
If you're using an Organization membership, the GroupApp team can generally manage the API key and code-signing setup on your behalf, so you typically don't need to create the key yourself.
How to Create an API Key
If you need to create the API key yourself, first make sure App Store Connect API access is enabled by following Step 2 above.
In App Store Connect, go to Users and Access > Integrations > App Store Connect API.
Select Team Keys. You must create a team key because individual keys cannot be used for code signing.
Click the + button.
Name the key Codemagic
Set Access to App Manager, the access level recommended by Codemagic.
Click Generate.
Download the .p8 key file and store it somewhere secure.
Important: You cannot change a key's name or access level after creation. If either needs to change, you'll need to revoke the key and generate a replacement.
Apple lets you download the .p8 file only once and does not keep a copy. If you lose it, you'll need to revoke the key and create a new one.
Share the API Credentials with GroupApp
Once you've created the API key, securely share these three items with the GroupApp team:
Issuer ID: Displayed above the API key list.
Key ID: Displayed in the key details.
.p8 key file: The private key file you downloaded when generating the key.
The GroupApp team uses these credentials to authenticate with your App Store Connect account and configure the access needed to build, sign, and publish your branded app.
Important: These credentials provide API access to your account. Share them using a secure method, such as a 1Password share link, Bitwarden Send, or another secure link with an expiration date. Do not send them through regular email, Slack, or text messages.