Creating an App Store Connect API key for pricing

Create the key

1. Sign in to App Store Connect as the Account Holder or an Admin and open Users and Access → Integrations → App Store Connect API (Apple's guide).
2. Under Team Keys, generate a new key. Give it a name you will recognise later, for example 'Pricing — RepriceCat'.
3. Choose the role. App Manager is the least-privileged role that can manage pricing; Admin also works. Avoid roles that cannot change prices (Developer, Marketing, Sales, Finance) — the key would be useless for pricing (role permissions).
4. Download the .p8 file. Apple lets you download it once; keep it somewhere safe.
5. Note the Key ID shown next to the key and the Issuer ID shown at the top of the page. Together with the .p8 these three values are the credential.

Individual vs team keys

App Store Connect offers individual keys (tied to one user) and team keys. Use a team key for pricing: it survives the person leaving the team and has an explicit role. Individual keys act as the user and inherit that user's access.

Storing it

• Treat the .p8 like a password: it cannot be re-downloaded, and anyone holding it plus the two IDs can act with the key's role.
• If you paste it into a tool, check what the tool does with it. RepriceCat encrypts the key with AES-256-GCM before it is stored, never sends it back to the browser, and uses it only to mint short-lived tokens for your own account.
• Keep one key per purpose. A pricing key does not need to be the same key your CI uses for uploads.

Revoking it

Back on the Integrations page, every key has a Revoke action. Revoking is immediate and permanent: tokens signed with that key stop working, and any tool that relied on it can do nothing further. That is the right move when someone leaves, when a key may have leaked, or when you stop using a tool.