asc-team-key-create

Creates App Store Connect API keys and downloads the one-time .p8 private key.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/dustinober1/sundee-fundee-ios --skill asc-team-key-create-dustinober1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: asc-team-key-create
Source: https://github.com/dustinober1/sundee-fundee-ios/tree/main/SundeeFundeeApp/.agents/skills/asc-team-key-create
Command: npx skills add https://github.com/dustinober1/sundee-fundee-ios --skill asc-team-key-create-dustinober1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Creating an App Store Connect API key normally requires manual steps in the Apple web portal, and the .p8 private key can only be downloaded once, making mistakes costly. This Skill automates key creation via Apple's iris API and securely saves the private key locally. ## Core Features & Use Cases - Automated Key Creation: Creates an Admin-role ASC API key with a user-specified nickname through the iris API using an existing web session. - One-Time Key Download: Downloads the .p8 private key, saves it to ~/.blitz with 0600 permissions, and retrieves the issuer ID. - Credential Pre-Fill: Calls the asc_set_credentials MCP tool to pre-fill the Blitz credential form for user verification. - Use Case: A developer setting up CI/CD for iOS app distribution needs a fresh ASC API key; the Skill creates the key, saves AuthKey_<KEYID>.p8, and outputs the exact asc auth login command. ## Quick Start Create a new App Store Connect API key named ci-deploy-key and save the private key for use with the asc CLI.

Frequently Asked Questions about asc-team-key-create

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an App Store Connect API key from the command line?▼

Use the provided Python script that calls Apple's iris API with your web session cookies to create an apiKeys resource with ADMIN role. It then downloads the private key and saves it as AuthKey_<KEYID>.p8 in ~/.blitz.

How to get the issuer ID for App Store Connect API authentication?▼

The script fetches the issuer ID by querying the apiKeys endpoint with include=provider and reading the contentProviders relationship. The issuer ID is the same for all keys in a team and is printed after key creation.

Why does App Store Connect key creation return a 401 error?▼

A 401 means the web session at ~/.blitz/asc-agent/web-session.json is missing or expired. Call the asc_web_auth MCP tool to open the Apple ID login window in Blitz and refresh the session, then retry.

Can I download an App Store Connect private key more than once?▼

No, the .p8 private key can only be downloaded once. After the first download, canDownload flips to false permanently, so the saved .p8 file is the only copy and must be kept safe.

What permissions does the created App Store Connect API key have?▼

The key is created with the ADMIN role and allAppsVisible set to true, granting access to all apps in the team. The authenticated Apple ID must have Account Holder or Admin role to create it.