Authentication variables
These variables configure API authentication credentials.Your App Store Connect API key ID
Your App Store Connect API issuer ID
Path to your private key (.p8) file
Raw private key content (PEM format)
Base64-encoded private key content (useful for CI/CD)
Ignore keychain and use config/env auth onlySet to
true, 1, yes, y, or on to bypass keychain lookup.Fail when credentials resolve from multiple sourcesSet to
true, 1, yes, y, or on to enable strict mode.Use a named authentication profile from config or keychain
Operational variables
These variables configure default values for apps, vendors, and other resources.Default app ID for commands that accept
--appVendor number for sales and financial reports
Timeout variables
Configure request and upload timeouts.Request timeout (e.g.,
90s, 2m, 120s)Default: 90sRequest timeout in seconds (alternative to
ASC_TIMEOUT)Example: 120 for 2 minutesUpload timeout for large files (e.g.,
60s, 5m)Default: 60sUpload timeout in seconds (alternative to
ASC_UPLOAD_TIMEOUT)Retry and debugging variables
Configure retry behavior and debug logging.Maximum number of retry attempts for transient errorsDefault:
3Base delay for exponential backoff (e.g.,
1s, 500ms)Default: 1sMaximum delay between retries (e.g.,
30s, 1m)Default: 30sEnable retry logging to stderrSet to
true, 1, yes, y, or on to enable.Enable debug logging
- Set to
truefor general debug logging - Set to
apifor HTTP request/response logging (redacts sensitive values)
Output variables
Configure default output formats.Default output format:
json, table, markdown, or mdWhen unset, output is TTY-aware:- Interactive terminals:
table - Pipes/files/CI:
json(minified)
--output flags always override this variable.Configuration path
Path to the configuration fileMust be an absolute path. When set, overrides the default config resolution order.
Variable precedence
Environment variables are resolved in this order:- Command-line flags (highest priority)
- Environment variables
- Config file (
~/.asc/config.jsonor.asc/config.json) - Keychain (for credentials only)
- Built-in defaults (lowest priority)
When
ASC_STRICT_AUTH=true, the CLI will fail if credentials are found in multiple sources (e.g., both environment variables and keychain).Examples
Basic authentication
CI/CD authentication with base64-encoded key
Debug HTTP requests
Custom timeout for slow networks
Force JSON output in all environments
Related
Authentication
Learn about authentication methods
Profiles
Use named authentication profiles
