Metadata access
Timeline reads every version and localization of your metadata. Rankings uses the same access to know which apps and keywords to track, then checks public App Store search.
App Store Connect roles
StoreGit works through an App Store Connect API key. The role you give that key decides which parts of StoreGit can load, so give it the smallest role that covers what you use.
Find your setup
Choose what you'll use. StoreGit asks for the lowest roles that cover it.
your setup
One key
Developer covers Timeline and Rankings, and shows App Info read-only.
Metadata KeyThe lowest role StoreGit asks for.Developer
App Manager, Marketing or Admin also work, with more access than StoreGit needs.
Roles and tabs
Each StoreGit tab needs one of these App Store Connect roles. Rows that match your setup above are marked.
| Role | Timeline and RankingsView history and ranks | App InfoEdit and commit | AnalyticsReports |
|---|---|---|---|
| Admin | |||
| App Manager | – | ||
| Marketing | – | ||
| Developer | – | – | |
| Sales and Reports | – | – | |
| Finance | – | – | |
| Customer Support | – | – | – |
App Info shows your current metadata with any role that can open Timeline. Editing and committing need App Manager, Marketing or Admin.
What each tab needs
timeline · rankings
app info
Edit access
Viewing App Info uses the metadata Timeline already loaded. Committing changes, adding languages and changing screenshots need a role that can edit your App Store metadata.
analytics
Report access
Analytics reads App Store Connect's analytics reports. The first time, StoreGit asks App Store Connect to start generating them, which can take a day or two.
Create a key
- Sign in to App Store Connect and open Users and Access.
- Choose Integrations, then App Store Connect API, and stay on Team Keys.
- Click Generate API Key. Name it, for example StoreGit, and choose the role from your setup.
- Download the .p8 file. Apple lets you download it only once.
- Copy the Issuer ID shown above your keys.
- In StoreGit, add the .p8 file and paste the Issuer ID. StoreGit fills in the Key ID from the file when it can.
Generate API Key
Name
StoreGit
Access
Developer
CancelGenerate
One key with the Developer role covers your setup.
Change a key's role
You can't change a team key's role after you generate it. Revoke it in App Store Connect, generate a new key with the role you need, then connect the new key in StoreGit.
- Metadata key: in StoreGit, open Settings › Account and choose Delete All Keys, then add the new key. Your history stays on your Mac and comes back when you reconnect with the same Issuer ID.
- Analytics key: open Settings › Account and choose Replace beside the Analytics Key.
- Individual keys follow their user's role, so change the user's role in Users and Access instead.
Keep your key safe
Treat the .p8 file like a password. Don't email it, commit it to a repository or paste it into a chat. StoreGit keeps it in your Mac's Keychain and never sends it to us, and our support will never ask for it. If a key leaks, revoke it in App Store Connect right away.
Apple's guides: Creating API keys for App Store Connect API and Role permissions.