List the connected App Store Connect, Play Console and Apple Ads accounts (ids, linked apps, status; never secrets).
Use the connection id in POST /v1/actions (or omit it when only one connection fits). status: invalid
means the provider rejected the credentials since they were added (last_error says why); fix them and call
POST /v1/connections/{id}/verify. mode: read_only connections can dry-run actions but not apply them.
Request
curl "https://api.appgoat.ai/v1/connections" \
-H "x-api-key: $APPGOAT_API_KEY"const res = await fetch("https://api.appgoat.ai/v1/connections", {
headers: {
"x-api-key": process.env.APPGOAT_API_KEY,
},
});
const { data, meta } = await res.json();import os, requests
res = requests.get(
"https://api.appgoat.ai/v1/connections",
headers={"x-api-key": os.environ["APPGOAT_API_KEY"]}
)
body = res.json()Query parameters
provider"asc" | "play_console" | "apple_ads"Response
200 with data: Connection[]. See the envelope for meta.
idstringproviderProviderasc = App Store Connect, play_console = Google Play Console, apple_ads = Apple Ads (Search Ads).
labelstringmode"actions" | "read_only"status"active" | "invalid" | "deleted"accountobjectNon-secret identifiers (issuer_id, key_id, client_email, ad_account_id, ad_account_name, currency, …).
appsLinkedApp[]last_verified_atstring | nulllast_errorstring | nulllast_synced_atstring | nullLast downloads / proceeds sync (ASC with vendor_number
created_atstringavailable_appsLinkedApp[]Only on verify.
Example
{
"data": [
{
"id": "con_x8Hq2mXc0aLpQwRtYb",
"provider": "asc",
"label": "string",
"mode": "actions",
"status": "active",
"account": {},
"apps": [
{}
],
"last_verified_at": "2026-10-22T10:00:00Z",
"last_error": "string",
"last_synced_at": "2026-10-22T10:00:00Z",
"created_at": "2026-10-22T10:00:00Z",
"available_apps": [
{}
]
}
],
"meta": {
"credits_used": 0,
"credits_remaining": 9981,
"request_id": "req_123"
}
}Status codes
200
The connections.
Missing or invalid API key.
429
rate_limitedToo many requests per second for your plan.