What is an App Store Connect API key?

The App Store Connect API is Apple’s REST API for the tasks you would otherwise do in App Store Connect, and the same tokens can upload a build. Each call is signed with a key you generate in App Store Connect.

Before any key exists, the Account Holder requests API access once, under Users and Access → Integrations. Team keys are then generated there by the Account Holder or an Admin, under Team Keys, and each one gets a role that decides what it can do. A team key covers every app in the account. Its name and role can’t be edited afterwards: revoke it and generate a new one. The private key file downloads only once, so store it safely. Individual keys also exist, one per user, tied to that person’s access.

The role matters for TestFlight. Apple lets only the Account Holder, Admins and App Managers create external groups and invite testers, so a key that sends builds to groups needs the App Manager or Admin role. App Manager is the narrower of the two: Apple describes it as managing all aspects of an app.

In VibeView. Add the key once under Builds → Stores, or with vibeview credentials asc-key add. VibeView uses it to upload to TestFlight, follow distribution and generate iOS and tvOS signing credentials. Like every credential you upload, it can be replaced or removed but never read back. Test connection (or vibeview credentials asc-key test <name>, CLI 0.56.0 or later) asks Apple with that key without changing anything. See What you need first.