An App Store Connect API key gives Tapcart the access it needs to build and submit your iOS app on your behalf. It's a required step before your first app submission and needs to stay valid long-term — Tapcart uses this key every time a new build is submitted through the Release Manager, including app updates and listing changes after your app is live.
Prerequisites
You must be an Account Holder (Owner) on the Apple Developer account.
Your Apple Developer Program must be active.
Ensure two-factor authentication (2FA) is enabled for your Apple ID.
Step 1: Generate the API Key
Open a web browser and go to App Store Connect
Log in using your Apple Developer account credentials.
From the App Store Connect homepage, click on Users and Access.
Select the Integrations tab at the top of the page.
Generate a TEAM KEY by clicking the “Generate API Key” button (the + symbol)
Provide a name for your API key (e.g., "Tapcart Integration" or "CI/CD Automation").
Under Access, select Admin (this grants full control over apps, users, and metadata).
Click Generate.
Once generated, the key will be listed under Active Keys.
Click Download API Key (.p8 file) — this is the only time you can download it!
Notes
Store the downloaded key securely, as you won’t be able to retrieve it later. Make note of the following — you'll need all three when uploading to Tapcart:
Key ID — found in the API Key list, formatted like
4AB44BZ2D9Issuer ID — found at the top of the Keys page, formatted like
12a4bc78-1234-12e3-e123-1a2b3c45d6d7Private Key — the .p8 file you just downloaded in Step 4
Step 2: Add the Key Information to the Tapcart Dashboard
Log into the Tapcart Dashboard
Select the App Name in the upper right corner
Select Settings (or access directly https://app.tapcart.com/settings)
Scroll down to the Apple API Key Section
Input the Issuer ID, Key ID, and upload the .p8 file provided by Apple
Hit Save
You can hit "Test API Key" and if it says "Valid API Key" that confirms the process was successful.
If you get an error, double check that the Key ID matches the .p8 file you uploaded, the Issuer ID is correct, and the API key hasn't been revoked in App Store Connect.
Considerations
Once your API key is saved and verified, let your Implementation Manager know so they can initiate your app submission. Your Implementation Manager will handle the first submission on your behalf.
After your app is live, this key is also used by the Release Manager every time you submit an app update or App Listing change. Keep it active and make sure it isn't revoked in App Store Connect — a revoked key will block future submissions. For more on managing builds after launch, see Release Manager: Complete Guide.
More Questions
If you have additional questions regarding your Apple Developer account, we’re happy to help! Please reach out to your Implementation Specialist or you can email us at [email protected].