AppSkyline API reference

Apple App Store engagement rows

Downloads/sessions engagement rows for your organization, optionally filtered by appId and a days cutoff. Requires the stats:read scope.

List apps

Lists the apps of your organization. Requires the apps:read scope.

Create an app

Requires the apps:write scope.

Get an app by id

Requires the apps:read scope.

Update an app

Requires the apps:write scope.

Read multiple collections in one request

Executes an array of authenticated read operations and returns an object keyed by each operation alias. Only the allowlisted app, keyword, preference, role and metadata collections can be read.

Verify saved Google Play release-read credentials without opening an edit

Requires releases:read. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

List Google Play review lifecycle states; policy explanations are unavailable

Requires releases:read. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Preview full track release replacement without writing

Requires releases:read. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Open a Google Play edit; may invalidate an earlier edit

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Read an edit

Requires releases:read. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Discard an edit

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Validate an edit without committing

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

List bundles within an edit

Requires releases:read. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Start a resumable AAB upload directly to Google

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported. Returns a secret uploadUrl capability, never OAuth credentials. PUT AAB bytes directly to that URL; do not log it. The edit is not committed.

Read localized listings in an edit

Requires releases:read. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Stage localized listing text

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Replace all releases on this track within an edit

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

Validate and commit; fail if changes are already in review

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported. A commit is not publication. deferReview=true requires subsequent Play Console submission. No automatic retry or review cancellation.

Update or halt one existing rollout and commit, preserving other releases

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported. Opens and commits a new edit. Coordinate per-app jobs to avoid invalidating other edits. Fraction cannot decrease; 1 completes rollout.

Upload Data safety CSV outside the edit workflow

Requires releases:write. Uses the stored service account for this AppSkyline app. Organization-admin session writes are also supported.

List keywords

Lists the tracked keywords of your organization, optionally filtered by appId. Requires the keywords:read scope. For stable traversal, set pagination=cursor; the response becomes {items, nextCursor} and is ordered by _id. Pass nextCursor back as cursor until it is null. The default array response and offset pagination remain unchanged when cursor pagination is not requested.

Create a keyword

Requires the keywords:write scope.

Get a keyword by id

Requires the keywords:read scope.

Update a keyword

Requires the keywords:write scope.

Delete a keyword

Requires the keywords:write scope.

Read current app-version review status across stores

Requires releases:read for scoped API keys. Organization is selected by authentication; app-bound keys see only their app. Product matches AppSkyline app names exactly, ignoring case. Pages contain at most five apps; follow nextCursor as after. Missing store IDs are not-configured; credential or upstream failures remain per-store errors. No submissions or edits are created.

Read sandbox keyword ranks without authentication

Returns a fixed set of demonstration keyword-rank rows in the same {searchTerms, store, country, rank} shape as authenticated keyword reads. No account, credential, or key is required, so agents can evaluate the API before onboarding. Responses carry the standard RateLimit response headers and the anonymous pacing limit applies.

Start a demonstration asynchronous rank check

Demonstrates the API's asynchronous-job pattern without authentication. The response is 202 Accepted with a Location header pointing at the job resource and a body carrying the job _id and status. Poll the Location URL until the status is succeeded, then read the ranks from the job body. The job is deterministic fixture work that completes about two seconds after creation.

Poll a demonstration rank check

Reads the status of a demonstration job started at POST /api/sandbox/rankchecks. While the job runs the status is running; afterwards it is succeeded and the body carries the checked term's rank in every store carrying it. No authentication is required.

List webhook subscriptions

Webhook subscriptions deliver app.created, app.updated, keyword.created, keyword.updated and keyword.deleted events to your server as signed POST requests (X-Appskyline-Signature: t=<timestamp>,v1=<hex HMAC-SHA256 of "timestamp.body">). An endpoint failing 20 times in a row is disabled automatically. Subscriptions are managed with an operator access token; the secret is only returned once, on create.

Create a webhook subscription

The response includes the signing secret exactly once — store it; it cannot be retrieved again.

Update a webhook subscription

url, events and active are editable; the secret and organization are immutable. Re-enabling an auto-disabled endpoint is done by setting active back to true.

Delete a webhook subscription