App Store revenue

Apple sends App Store Server Notifications V2 straight to a URL, and signs each one itself. We verify the signature against Apple's certificate chain, check that the bundle id is this app's, and read the price, currency, storefront and buyer from the signed transaction inside. There is no secret to paste and nothing to configure beyond the URL -- purchases, renewals, offers and refunds all arrive this way.

1. 1App Store Connect → your app → App Information → App Store Server Notifications. Choose Version 2.
2. 2Set both the Production Server URL and the Sandbox Server URL to the address on the app's Revenue tab (*Or take App Store revenue directly*). Sandbox is where every test purchase happens; leaving it blank is the commonest reason a test never arrives.
3. 3Make sure the bundle id on the App details tab matches App Store Connect exactly. Notifications for any other bundle are refused.

https://api.roassensor.com/api/tracking/webhooks/appstore/YOUR_PUBLIC_KEY

Apple offers no "send test" button; the first sandbox purchase is the test. Sandbox purchases arrive flagged is_test, are attributed normally, and stay out of reported revenue.

Apple allows one notification URL per app, and a backend that manages entitlements from these notifications cannot give it up. So point Apple at us and we forward every notification to you, untouched:

1. 1Revenue tab → *Forward App Store notifications* → paste your existing endpoint → Save.
2. 2Press Test. It reports *reachable* on any HTTP answer, 4xx included -- a handler that parses signedPayload rightly rejects a test body. Only a real forward sets the last-status badge.
3. 3Then change the URL in App Store Connect to ours.

The body goes out byte for byte with only a Content-Type header, so your receiver verifies Apple's signature over exactly the bytes Apple produced and cannot tell it was relayed. Every verified notification type is forwarded, including the ones we do not book (EXPIRED, DID_CHANGE_RENEWAL_STATUS, …), because a subset would never expire anyone.

Delivery is durable: a 5xx, a timeout or a 429 from your side is retried with backoff for hours, because once we hold Apple's slot, Apple's own retries end at us. A 4xx parks the notification -- the same bytes will not become acceptable -- and the Revenue tab shows a Retry for it. Your URL must be https and public; private, loopback and link-local targets are refused.

Apple's notification names the transaction, not the buyer. The app supplies the link by passing Roas.appAccountToken() as StoreKit's appAccountToken on every purchase -- a UUID derived from the visitor id, which the server reverses. Each SDK page shows the line. Without it sales book as unattributed.

A free trial or introductory offer books what was charged -- zero for a trial -- with the offer phase recorded, so the first paid renewal arrives as its own conversion at full price. The storefront country is kept on the conversion, so a sale in one region is reported against the spend that bought it.

Apple's notification is fast but not instant, and the dashboard is empty until it lands. With an In-App Purchase key on your account, the SDK's verifyPurchase(transactionId:) lets us ask Apple about a transaction the moment the app sees it. We only ever *ask*: the amount always comes from Apple's own signed copy, never from the app, and the later notification for the same sale is recognised, not double-counted.

1. 1App Store Connect → Users and Access → Integrations → In-App Purchase → Generate key. Note the Key ID and the Issuer ID shown above the key list, and download the .p8 once (Apple never shows it again).
2. 2Revenue tab → In-App Purchase key → Add: name, Key ID, Issuer ID, and the .p8 contents. One key covers every app on your Apple team; select it on each app.