App Store Connect CLI

A fast, lightweight, and scriptable CLI for the App Store Connect API. Automate iOS, macOS, tvOS, and visionOS release workflows from your terminal, IDE, or CI/CD pipeline.

Table of Contents

• asc skills
• Quick Start
• Troubleshooting
• Privacy and telemetry
• Support
• Wall of Apps
• Common Workflows
• Commands and Reference
• Documentation
• Acknowledgements
• Contributing
• License

asc skills

Agent Skills for automating asc workflows including builds, TestFlight, metadata sync, submissions, and signing: https://github.com/rorkai/app-store-connect-cli-skills

Install them globally so they are available across projects:

asc install-skills

The command installs the 25 skills from pinned, reviewed commit f52c4f04323bb2dfb21ca8be82e6494e9cd0b4d8 and requires only git; it runs no Node.js, npx, npm package, or repository script. See Agent skills for what it verifies and changes.

Quick Start

If you want to confirm the binary works before configuring authentication:

asc version
asc --help

1. Install

# Homebrew (recommended)
brew install asc

# Install script (macOS/Linux)
curl -fsSL https://asccli.sh/install | bash

# Windows (WinGet, once the package is accepted)
winget install asc

# Exact fallback when scripting
winget install --id Rorkai.ASC --exact

The WinGet package is tracked in GitHub Discussion #1552. Until it appears in winget search asc, Windows users can download the release binaries directly from the GitHub releases page.

With Nix:

# Run without installing
nix run github:rorkai/App-Store-Connect-CLI -- --version

# Install into your profile
nix profile install github:rorkai/App-Store-Connect-CLI

The flake builds the latest source on main.

For source builds and contributor setup, see CONTRIBUTING.md. Released binaries are self-contained and do not require a Go installation; source builds use the toolchain version declared by go.mod. Releases built with Go 1.27 require macOS 13 Ventura or later. On older Macs, retain an older compatible release or upgrade macOS before updating asc.

2. Authenticate

asc auth login \
  --name "MyApp" \
  --key-id "ABC123" \
  --issuer-id "DEF456" \
  --private-key /path/to/AuthKey.p8 \
  --network

Individual API keys have no issuer ID. Omit --issuer-id and pass --key-type individual:

asc auth login \
  --name "MyIndividualKey" \
  --key-id "ABC123" \
  --key-type individual \
  --private-key /path/to/AuthKey.p8

Generate API keys at: https://appstoreconnect.apple.com/access/integrations/api

If a service holds the private key and signs App Store Connect tokens for you, set ASC_BEARER_TOKEN to such a token instead of configuring a key; asc sends it until it expires (Apple's maximum is 20 minutes). For longer runs, set ASC_BEARER_TOKEN_COMMAND to a command that prints a new token, and asc renews the token before it expires. See Authentication.

If you are running in CI, a headless shell, or a machine where keychain access is not available, use config-backed auth instead:

asc auth login \
  --bypass-keychain \
  --name "MyCIKey" \
  --key-id "ABC123" \
  --issuer-id "DEF456" \
  --private-key /path/to/AuthKey.p8

3. Validate auth

asc auth status --validate
asc auth doctor

4. First command

asc apps list --output table
asc apps list --output json --pretty

Output defaults (TTY-aware)

asc chooses a default --output based on where stdout is connected:

• Interactive terminal (TTY): table
• Non-interactive output (pipes/files/CI): json

You can still set a global preference:

export ASC_DEFAULT_OUTPUT=markdown

And explicit flags always win:

asc apps list --output json

Compatibility

Commands are supported as documented. Deprecation warnings identify the available migration path and the command's long-term replacement.

Troubleshooting

Homebrew

• Refresh Homebrew first: brew update && brew upgrade asc
• Check which binary you are running: which asc
• Confirm the installed version: asc version
• If Homebrew is behind the latest GitHub release, use the install script from https://asccli.sh/install

WinGet

• Refresh WinGet sources first: winget source update
• Prefer the short install once available: winget install asc
• If the short name ever becomes ambiguous, use the package identifier: winget install --id Rorkai.ASC --exact
• Confirm the installed command resolves: Get-Command asc and asc version

Authentication

• Validate the active profile: asc auth status --validate
• Run the auth health check: asc auth doctor
• If keychain access is blocked, retry with ASC_BYPASS_KEYCHAIN=1 or re-run asc auth login --bypass-keychain
• Use asc auth login --local --bypass-keychain ... when you want repo-local credentials in ./.asc/config.json

Apple service health

• Check Apple's developer services without credentials: asc system-status
• Narrow unexpected API or upload failures: asc system-status --service "App Store Connect"
• Poll only when requested: asc system-status --watch --poll-interval 30s
• Use --issues-only for a concise incident view; summary counts still cover all matched services

Output

• Use an explicit format when scripting or sharing repro steps: --output json, --output table, or --output markdown
• Add --pretty to JSON output for bug reports

This is the beginning of the README. Read the rest at the original. Read the full README ↗