Store credentials
Settings → Credentials is a library of named store credentials. One Relay can ship apps from different teams and accounts: an upload step picks a credential by name, or uses the store’s default.
| Store | What you add |
|---|---|
| App Store Connect | An API key: Key ID, Issuer ID and the .p8 file. |
| Google Play | A service account’s JSON key, with access to your app in Play Console. |
Each credential can be checked from the app.
How they’re stored
Section titled “How they’re stored”Credentials are kept in data/credentials.json, readable only by your account, apart from the database. The app only ever shows names and summaries.
For App Store uploads, Relay uses xcrun altool, which reads the key from ~/.appstoreconnect/private_keys. The key is written there only for the upload and removed afterwards, unless it was already there.
From the environment
Section titled “From the environment”Keys set in the environment show as a read-only entry named “From environment”:
| Variable | |
|---|---|
ASC_KEY_ID, ASC_ISSUER_ID, ASC_PRIVATE_KEY |
App Store Connect API key. |
PLAY_SERVICE_ACCOUNT |
Google Play service account JSON. |