Store Connections#

Connect your store accounts to Stora to enable direct metadata publishing, screenshot uploads, and app submission.

App Store Connect#

What You Need#

To connect App Store Connect, you need an API key from your Apple Developer account:

• Issuer ID — Found at the top of the App Store Connect API Keys page.
• Key ID — The identifier for your specific API key.
• Private Key (.p8 file) — Downloaded when you create the API key. This can only be downloaded once.

How to Create an API Key#

1. Go to App Store Connect and sign in.
2. Navigate to Users and Access > Integrations > App Store Connect API.
3. Click the + button to create a new key.
4. Give the key a name (e.g., "Stora") and select the App Manager role.
5. Click Generate.
6. Download the .p8 private key file immediately. You will not be able to download it again.
7. Note the Key ID shown in the list and the Issuer ID at the top of the page.

Adding to Stora#

1. Go to your project's Settings > Store Connections.
2. Click Connect App Store Connect.
3. Enter your Issuer ID, Key ID, and paste the contents of your .p8 private key file.
4. Click Save.

Note: Stora validates the credentials by making a test API call to App Store Connect. If validation fails, double-check that your key has the App Manager role and that the Issuer ID is correct.

What It Enables#

With App Store Connect connected, you can:

• Publish optimized metadata (title, subtitle, description, keywords, promotional text, release notes) directly from Stora
• Upload screenshots to the correct device slots
• Submit builds for review
• Check review status
• Import existing metadata and screenshots from your live listing

---

Google Play Console#

What You Need#

To connect Google Play Console, you need a Service Account with the appropriate permissions:

• Service Account JSON — A credentials file for a Google Cloud service account that has been granted access to your Google Play Console.

How to Create a Service Account#

1. Go to Google Play Console and navigate to Setup > API access.
2. Click Link to connect your Google Cloud project (if not already linked).
3. Click Create new service account and follow the link to Google Cloud Console.
4. In Google Cloud Console, create a new service account with a descriptive name (e.g., "stora-integration").
5. Create a JSON key for the service account and download it.
6. Back in Google Play Console, grant the service account the Release manager role for your app.

Adding to Stora#

1. Go to your project's Settings > Store Connections.
2. Click Connect Google Play Console.
3. Upload or paste your Service Account JSON file contents.
4. Click Save.

What It Enables#

With Google Play Console connected, you can:

• Publish optimized metadata (title, short description, full description, release notes) directly from Stora
• Upload screenshots and feature graphics
• Submit releases to tracks (internal, alpha, beta, production)
• Check rollout status

---

Security#

Note: All store credentials are encrypted at rest using AES-256-GCM. Encryption keys are managed separately from the database. Credentials are only decrypted in memory at the moment they are used to make an API call to the respective store.

Stora follows these security practices for your store credentials:

• Encrypted at rest — Credentials are encrypted before being stored in the database.
• No plaintext storage — Private keys and service account JSON are never stored in plaintext.
• Minimal access — Stora only requests the permissions it needs (App Manager for Apple, Release Manager for Google).
• No credential sharing — Your credentials are scoped to your account and are never shared with other users or used for any purpose other than the actions you initiate.
• Audit log — Every API call made with your credentials is logged and visible in your project's activity feed.

You can disconnect a store connection at any time from your project settings. Disconnecting immediately deletes the stored credentials.