App Store Connect

Connect App Store Connect to Expira with an API key to track Apple certificate, provisioning profile and Apple Pay merchant certificate expiry.

Expira reads your Apple developer team’s signing assets through the App Store Connect API and tracks when each one expires. Daily syncs run at 07:45 UTC, before the morning alerts.

What Expira finds

Type	Default	Notes
Certificates	On	Distribution, development and other signing certificates.
Provisioning profiles	On	App Store, Ad Hoc, In-House and development profiles.
Apple Pay merchant certificates	Off	Certificates attached to your merchant IDs.

Create an API key

1. Open the API keys page

   In App Store Connect, go to Users and Access → Integrations → App Store Connect API → Team Keys.

2. Generate a key

   Press +, name the key (for example “Expira”), and choose a role that can view certificates and provisioning profiles. Admin always can. If a sync returns HTTP 403 for certificates or profiles, the key’s role can’t read them; create a key with a higher role.

3. Download the key and note its IDs

   Download the .p8 file. Apple lets you download it only once. Copy the Key ID from the key’s row and the Issuer ID shown above the list.

Add the connection in Expira

Go to Integrations → App Store Connect → Add connection and fill in:

• Display name, for example your team’s name.
• Issuer ID: a UUID such as xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.
• Key ID: 10 characters.
• Private key: drop the .p8 file onto the form, or click to browse.
• The types to sync.

Save, then press Sync.

Revoke the key

To disconnect, remove the integration, then revoke the key on the Team Keys page in App Store Connect.