- Read transaction history and transaction details from the App Store Server API.
- Read refund history and respond to consumption requests.
- Look up subscription status.
- Sign promotional offers for your app.
For receipt-based validation, Qonversion uses the App-Specific Shared Secret. The In-App Purchase key serves the App Store Server API and promotional offers.
This is a different key from the App Store Connect API key, which syncs your catalog, prices and sales reports. The keys come from different tabs in App Store Connect, so check the tab before downloading the
.p8 file.1. Make sure you have the right role
To generate an In-App Purchase API key, your App Store Connect user must have one of these roles:- Account Holder
- Admin
2. Open the In-App Purchase tab
- Log in to App Store Connect.
- Click Users and Access in the top navigation.
- Open the Integrations tab.
- Switch to the In-App Purchase sub-tab (not “App Store Connect API”).
- Click Generate In-App Purchase Key (or + if you already have keys).
3. Generate a new key
- Give it a clear name, e.g. Qonversion.
- Click Generate.
4. Copy the Key ID and Issuer ID, and download the .p8 private key
Everything you need lives on the same screen — copy the two identifiers and download the key file before leaving:- Copy the Key ID (10-character string in the row of your new key) — this is Key ID in Qonversion.
- Above the table, copy the Issuer ID (UUID format, e.g.
57246542-96fe-1a63-e053-0824d011072a) — this is Issuer ID in Qonversion. - In the same row, click Download API Key to get the .p8 file.
5. Paste everything into Qonversion
- Open Qonversion Dash → Project Settings → Stores → Apple App Store.
- When the App Store Server API row offers Add In-App Purchase key or Replace In-App Purchase key, select that action. Contact support if you need help adding a key for promotional offers.
- Upload the
.p8file in the Private key (.p8) field. - Paste the Key ID in the Key ID field.
- Paste the Issuer ID in the Issuer ID field.
- Upload the
- Click Save key.
- Generate a new In-App Purchase key in App Store Connect.
- Save the new key in Qonversion using Replace In-App Purchase key.
- Keep the old key active and ask Qonversion support to confirm the replacement for App Store Server API requests, promotional offers, and Refund Keeper, as applicable.
- Revoke the old key in App Store Connect after support confirms the replacement.
How the two keys work together
The App Store Connect API key provides catalog and price access, and can read sales reports when configured with report access and a Vendor number. The In-App Purchase key provides App Store Server API access and signs promotional offers. An App Store Connect key may also be used for supported App Store Server API requests, but it does not sign promotional offers. Without an In-App Purchase key, Qonversion cannot sign promotional offers for your app.Troubleshooting
When adding an In-App Purchase key, use the.p8 file from Apple’s In-App Purchase tab.
Transactions or history fail with HTTP 401 / NOT_AUTHORIZED
- Make sure you pasted the Key ID, not the key name.
- Make sure the Issuer ID is from the In-App Purchase tab, not the App Store Connect API tab.
- Make sure the
.p8file matches the Key ID you pasted. - If the key was already revoked in App Store Connect, generate a new one and enter its
.p8, Key ID and Issuer ID using Replace In-App Purchase key on the App Store Server API row. Contact support if that action is not available.
Lost the .p8 file
Apple does not let you re-download the file. If the key is already saved in Qonversion and still works, no action is needed. If you need to replace it, open Users and Access → Integrations → In-App Purchase in App Store Connect and follow the replacement steps above. Contact support if Replace In-App Purchase key is unavailable.What’s next?
To finish setting up the App Store connection:- Server-to-server notifications — copy the Server-to-Server Notification URL into App Store Connect.