How to use this app?

App Store Connect holds reviews, downloads, subscriptions, conversion, and payouts in separate screens. Appris pulls those reports onto your Mac and lines them up so an AI agent can read them.

Three things happen, and they stay on this computer:

• Your API key stays in the macOS Keychain.

  Appris uses the key only to talk to Apple. It is stored by macOS, the same place passwords and certificates live.

• A local warehouse holds the reports.

  Downloads land in a SQLite file at ~/Library/Application Support/ASCInsights/warehouse.sqlite. You can reveal that file from Settings.

• Your agent reads the warehouse, not Apple.

  A small server listens only at http://127.0.0.1:18742/mcp. That address means “this Mac.” Cursor, VS Code, Claude Code, and Claude Desktop ask that server. The private key file is never sent to them.

Once a dataset has synced, ask in a normal sentence. These are the questions Appris is built to answer:

You can also ask what is ready and what is still waiting on Apple. That check is always available, even before the slower reports arrive. Ready-made wording lives on the prompts page.

• A Mac on macOS 14 or later.

  Download Appris, open it, and leave it running for the first sync. You can turn on “Open at login” later in Settings so new reports keep arriving.

• An Apple ID that can open App Store Connect for your apps.

  Sign in at appstoreconnect.apple.com. If you are a solo developer, you are the Account Holder. On a company team, an Account Holder or Admin creates the key.

• About ten minutes, plus a wait for Apple.

  Reviews usually appear in seconds. Sales and subscriptions often show up the next time Apple publishes a report. Analytics commonly takes 24–48 hours the first time.

Download for macOS 14+

An API key is how Apple lets Appris sign in without your Apple ID password. It has three pieces, and Appris needs all three:

• Issuer ID

  One ID for your whole team. It looks like 57246542-96fe-1a63-e053-0824d011072a. Every key on the team shares it.

• Key ID

  A short ID for this specific key, about ten characters, such as 2X9R4HXF34.

• Private key file (.p8)

  A file named like AuthKey_2X9R4HXF34.p8. Apple lets you download it once. After that, the download link disappears. Apple does not keep a copy.

If this is the first API key on the account

The Account Holder has to turn the API on once. Open Users and Access, then Integrations. If you see Request Access, check the terms and click Submit. Access is usually granted right away. On a company team, ask the Account Holder to do this step.

Generate the key

1. 1

   Open the API keys page

   In App Store Connect, click Users and Access, then the Integrations tab. The page opens with App Store Connect API selected. Direct link: Integrations → App Store Connect API.
2. 2

   Stay on Team Keys

   Click Team Keys. A team key works across the apps on the account, which is what Appris uses when you pick one or more apps to track.
3. 3

   Click Generate API Key

   If the team already has a key, click the add button (+) instead. Give the key a name you will recognize later, such as “Appris on my Mac.” The name is only a label. It is not part of the secret.
4. 4

   Choose Admin under Access

   Under Access, select Admin. Team keys apply to every app, so you cannot limit a key to a single app here. You choose which apps Appris tracks later, inside the app.
5. 5

   Click Generate

   The new row shows the key name, the Key ID, and a download link. Leave this page open until you have copied both IDs and saved the file.
6. 6

   Download the .p8 immediately

   Click Download API Key on that row, then confirm. Save AuthKey_XXXXXXXXXX.p8 somewhere you can find it, such as a folder you control. Do this before you close the dialog. The link is shown only until the file has been downloaded.
7. 7

   Copy the Key ID

   On the same row, hover the Key ID and click Copy Key ID. It must belong to the .p8 you just downloaded. If you have older keys, do not mix their IDs with this file.
8. 8

   Copy the Issuer ID

   The Issuer ID sits near the top of the Integrations page, above the list of keys. Click Copy next to it. It is the same for every key on the team, so you only look it up once.

Individual keys

Each App Store Connect user can also create one personal key: click your name at the top right, choose Edit Profile, and under Individual API Key click Generate Key, then Download. That key has the same permissions as your user, and you can have only one active individual key. For Appris, a Team key set to Admin is the straightforward choice, because that is the role that can request analytics for the account.

Apple’s own write-up of these screens is App Store Connect API — Get started.

The Vendor Number is an eight-digit number Apple assigns to the legal entity that gets paid. Appris needs it to download sales and subscription reports. It is separate from the API key.

1. 1

   Open Payments and Financial Reports

   In App Store Connect, go to Payments and Financial Reports. You need a role that can see financial reports: Account Holder, Admin, or Finance.
2. 2

   Read the number next to your vendor name

   The Vendor Number appears in the upper-left of that page, beside the vendor name. It looks like 93539126. If the account has more than one vendor, pick the vendor that owns the apps you want to track.
3. 3

   Copy all eight digits

   You will paste this into Appris on the Vendor step. Sales, subscriptions, and payouts all use it. Reviews and the in-app purchase catalog do not.

Open Appris. The first launch is a seven-step wizard: Welcome, API Key, Credentials, Vendor, Verify, Apps, and First Sync. You can go back at any time before you finish.

1. 1

   Welcome

   Read the short overview and click Continue. Nothing is sent yet.
2. 2

   API Key

   This screen repeats the App Store Connect path. Click Open App Store Connect if you still need to create the key, then click Continue.
3. 3

   Paste Issuer ID and Key ID

   On Add your credentials, paste the Issuer ID into the first field and the Key ID into the second. Both fields are required. The Issuer ID is the long UUID. The Key ID is the short code from the key’s row.
4. 4

   Drop the .p8 onto the target

   Drag AuthKey_XXXXX.p8 onto the dashed box that says “Drop AuthKey_XXXXX.p8 here.” Appris reads the file on your Mac and checks that it is a private key. You should see “PEM looks valid” in green. Drop the file again if you picked the wrong one. Continue stays disabled until the file is valid and both IDs are filled in.
5. 5

   Enter the Vendor Number

   Paste the eight-digit Vendor Number. Click Open Payments and Financial Reports if you still need to look it up. Continue stays disabled until this field has a value.
6. 6

   Run the access checks

   Click Run checks. Appris signs in to Apple with your key and reports four results:

   • List apps — the key can see your apps. This one has to succeed before you can continue.
   • Reviews — the key can read customer reviews.
   • Sales reports — the Vendor Number and the key can download a recent sales summary.
   • Analytics — the key can see analytics report requests. Creating those requests the first time needs Admin.

   A red row includes Apple’s message and, when Appris knows the cause, a short hint. Fix the Issuer ID, Key ID, .p8, Vendor Number, or role, then run the checks again.

7. 7

   Choose the apps to track

   Appris lists every app the key can see and selects them all. Click a row to include or exclude it. At least one app is required. The bundle ID is shown under the name so you can tell similarly named apps apart. You can change the list later in Settings → Tracked apps → Manage tracked apps.
8. 8

   Finish and open Sync

   Appris saves the credentials in the Keychain, remembers the apps, and starts the first download. The last wizard screen says “You’re all set.” Click Open Sync to watch each source.

The Sync screen shows one row per source, with a status and a record count. “Waiting on Apple” means the request was accepted and Apple has not published the file yet. You do not need to create the key again.

Sales and subscription files are published by Apple around 8am Pacific Time for the previous day. If a row is still waiting tomorrow morning, open Sync again or use Settings → Sync all sources now. Sync downloads every tracked app. The list on screen follows the app selected in the sidebar.

In the Appris sidebar, open Connect Agents.

1. 1

   Turn on the MCP server

   Switch on “MCP server for AI agents.” The status should change to listening, and the address should be http://127.0.0.1:18742/mcp. If it does not, click Refresh. The same switch also lives under Settings → MCP.
2. 2

   Add Appris to the agent you use

   Click Add to Cursor, Add to VS Code, Add to Claude Code, or Add to Claude Desktop. Appris writes the local config for you. The manual snippets are on the agents page if you prefer to paste them yourself.
3. 3

   Reload the agent

   In Cursor, open Settings → MCP and toggle appris off, then on. In VS Code, reload the window and trust the server if asked. Quit and reopen Claude Desktop after its config changes.
4. 4

   Pick the app, then ask

   If you track more than one app, choose it in the App menu at the bottom of the Appris sidebar. Then ask in the agent, in plain language. Start with reviews, because that data is usually ready first: “Summarize this month’s 1-star reviews and the top complaints.”

Answers include how fresh the data is. If analytics is still waiting, the agent should say so rather than invent a conversion rate.

• After Appris shows “PEM looks valid,” the Keychain has the key.

  You can move the .p8 out of Downloads into a private folder, or delete your extra copy once you are sure onboarding finished. You cannot download that same file from Apple again.

• Revoke a key you no longer trust.

  In Users and Access → Integrations → App Store Connect API → Team Keys, revoke the old key. Generate a new one, download the new .p8, and copy the new Key ID. In Appris, open Settings → Clear Keychain credentials, then walk through onboarding again. The Issuer ID does not change.

• Reset the warehouse only when you want a clean download.

  Settings → Reset warehouse deletes the reports already saved on this Mac. Your API key stays. The next sync downloads them again, within the history Apple still publishes.