Connect App Store Connect
App Store Connect provides the app identity and the Analytics Reports that SpendDaddy uses for organic installs, attribution, and acquisition ratio checks. It is optional. Without it, SpendDaddy identifies your app through Apple Ads and RevenueCat, and download and organic metrics stay empty. You can skip it in Add app and connect it later in Settings → Connections.
What you need
Create a Team API key for the App Store Connect API with the Admin role. SpendDaddy uses it to create the ongoing Analytics Report request for your app and read the reports after Apple generates them. You will enter three values:
| SpendDaddy field | Where to find it | What to provide |
|---|---|---|
| Issuer ID | Users and Access → Integrations → App Store Connect API | The issuer ID shown near the top of the page. |
| Key ID | Team Keys on the same page | The key ID for the Team key you generated. |
| Private key | The download from Apple | The .p8 file for that same key. |
Do not use an App Store Server API key, an individual API key, or an Apple Ads key. Apple does not allow individual keys to access Sales and Finance API endpoints. Apple lets you download the private key only once. If you lose the file, revoke that key and generate a replacement.
1. Request API access
If your team has not enabled the App Store Connect API yet, the Account Holder should open App Store Connect API and select Request Access. Apple must approve this before the key creation controls appear.
2. Generate the Team API key
- In App Store Connect, open Users and Access → Integrations → App Store Connect API.
- Under Team Keys, select Generate API Key.
- Give the key a recognizable name and choose Admin for access.
- Generate the key and download the
.p8private key immediately.
Apple's Creating API Keys for App Store Connect API guide covers the key-generation screens. The private key is shown only at download time, so keep it in a server-side secret store.
3. Add the key to SpendDaddy
Open Add app and enter the Issuer ID and Key ID for the same Team key.
Upload its .p8 private key in the Private key field, then select Review
apps. If you started filling the card and want to continue without it, select
Skip App Store Connect for now. SpendDaddy creates a short-lived JWT from these values, lists
your App Store Connect apps, and checks whether the key can read Analytics
Report requests. You can connect the key before the first report is generated.
Apple explains where to find the IDs and how the JWT is formed in Generating Tokens for API Requests.
4. Make an Analytics Report available
SpendDaddy creates an ONGOING Analytics Report request automatically when you create the app. You do not need to make an API call or download a report from the App Store Connect website. Apple says the first report takes about 24–48 hours to generate; download and organic metrics appear after it arrives.
If Apple later stops the request due to inactivity, SpendDaddy uses the Admin
key to create a new one. Apple's Analytics Reports guide
explains the request lifecycle and role permissions. An Admin key has broad
App Store Connect permissions, so keep the .p8 private key secure.
What success looks like
- The App Store Connect card shows Valid in the Add app flow.
- SpendDaddy displays the app it found and matches it with Apple Ads and RevenueCat.
- Download and funnel metrics appear after SpendDaddy's request and Apple's first report refresh. These metrics can lag behind setup by 24–48 hours.
Troubleshooting
Invalid credentials or a 401: Check that the Issuer ID, Key ID, and .p8
file all belong to the same Team key. Do not paste the key ID into the Issuer ID
field, and do not use an App Store Server API key.
Forbidden Analytics Reports: Confirm that the Team key has the Admin role. A key cannot be changed after creation; generate a new one if its role is wrong.
Reports are not available yet: Wait for Apple's first report-generation window. Re-running the SpendDaddy validation cannot make a report appear sooner.
While App Store Connect is unavailable, Apple Ads and RevenueCat keep working. Organic install and acquisition metrics stay empty or show a warning until report access is fixed.