moasqmoasq/ios-dev-agent/.agents/skills/apple-developer-auth/SKILL.md

apple-developer-auth

Skill4 starsChanged 6 months agoMITView on GitHub

Use when authenticating to Apple Developer Portal, checking Apple auth status, creating App Store Connect API credentials, or running portal operations that need Apple ID, 2FA, certificates, profiles, bundle IDs, or ASC setup.

In this repository76 other files it gives its agents.
- AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- .cursor/rules/components.mdcCursor rule
- .cursor/rules/currency.mdcCursor rule
- .cursor/rules/design-system.mdcCursor rule
- .cursor/rules/file-structure.mdcCursor rule
- .cursor/rules/forbidden-patterns.mdcCursor rule
- .cursor/rules/mvvm-architecture.mdcCursor rule
- .cursor/rules/pricing-display.mdcCursor rule
- .cursor/rules/scope.mdcCursor rule
- .cursor/rules/swift-conventions.mdcCursor rule
- accessibilitySkill
- animationsSkill
- apple-signinSkill
- app-store-preflightSkill
- asc-app-create-uiSkill
- asc-aso-auditSkill
- asc-build-lifecycleSkill
- asc-cli-usageSkill
- asc-crash-triageSkill
- asc-id-resolverSkill
- asc-localize-metadataSkill
- asc-metadata-syncSkill
- asc-metadata-yamlSkill
- asc-notarizationSkill
- asc-ppp-pricingSkill
- asc-release-flowSkill
- asc-revenuecat-catalog-syncSkill
- asc-screenshot-resizeSkill
- asc-shots-pipelineSkill
- asc-signing-setupSkill
- ascSkill
- asc-submission-healthSkill
- asc-subscription-localizationSkill
- asc-testflight-orchestrationSkill
- asc-wall-submitSkill
- asc-whats-new-writerSkill
- asc-workflowSkill
- asc-xcode-buildSkill
- billing-finance-calculatorSkill
- buildSkill
- business-modelSkill
- chartsSkill
- consolidate-errorsSkill
- content-composerSkill
- crashSkill
- debuggingSkill
- feature-directory-structureSkill
- feedback-statesSkill
- fix-errorSkill
- formsSkill
- foundation-modelsSkill
- hapticsSkill
- healthkitSkill
- layoutSkill
- listsSkill
- navigationSkill
- notificationsSkill
- onboarding-questionnaireSkill
- onboardingSkill
- The first 60 shown.

The file

We split this skill into the rules it gives an agent

1 rule. About 0 are common, 1 is distinctive, and 0 are very specific to this project.

≈0
Common · estimate
Many files like this have a rule of this kind.
≈1
Distinctive · estimate
This author's own choices. Worth a look.
0
Very specific
Tied to their project's names, files or tools. Probably skip.

Common
Distinctive
Very specific

Distinctive:
Red (not connected): No session at all
line 82

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.

Files

SKILL.md

Apple Developer Authentication

Tell the user to run the interactive menu:

! python3 .agents/scripts/apple-developer-auth.py

What the menu shows

If not connected (red):

  ● Not connected

  [1] Sign in  (Apple ID + password + 2FA)
  [2] Manual   (provide .p8 API key for asc CLI)

If connected (green):

  ● Connected  as user@apple.com
    Session age: 3d — valid for ~27d more

  [1] Revoke session (sign out)
  [2] List apps
  [3] List certificates
  [4] List profiles
  [5] Register bundle ID
  [6] Setup asc CLI (.p8 key)

If expired (yellow):

  ● Expired  session for user@apple.com

  [1] Sign in
  [2] Manual
  [3] Revoke (clear expired session)

Direct commands

For non-interactive use (e.g. from Claude):

# Sign in
! python3 .agents/scripts/apple-developer-auth.py login --user user@apple.com

# Check status (validates live against Apple)
! python3 .agents/scripts/apple-developer-auth.py status

# Revoke / sign out
! python3 .agents/scripts/apple-developer-auth.py revoke

# Portal operations
! python3 .agents/scripts/apple-developer-auth.py list-apps
! python3 .agents/scripts/apple-developer-auth.py list-certs
! python3 .agents/scripts/apple-developer-auth.py list-profiles
! python3 .agents/scripts/apple-developer-auth.py register-bundle com.example.app "My App"

# Manual .p8 key setup
! python3 .agents/scripts/apple-developer-auth.py setup-asc

Auth flow internals (mirrors Fastlane Spaceship)

Widget key from appstoreconnect.apple.com/olympus/v1/app/config
Hashcash proof-of-work (SHA-1, X-Apple-HC-Bits/X-Apple-HC-Challenge)
SRP-6a: signin/init (sends A, receives B+salt+iterations) → PBKDF2 → signin/complete (sends M1+M2)
2FA: device push or SMS (user types code, or sms to switch)
Trust: GET /appleauth/auth/2sv/trust
Cookies persisted at ~/.apple-developer-auth/cookies.txt (~30 days)

Status validation

status and menu validate live — not just checking if a cookie file exists. They call Apple's Olympus session endpoint and report:

Green (valid): Cookie exists AND Apple accepted it
Yellow (expired): Cookie exists but Apple rejected it
Red (not connected): No session at all

Environment variables

Variable	Purpose
`APPLE_ID`	Apple ID email (skips prompt)
`APPLE_PASSWORD`	Password (skips prompt)
`APPLE_2FA_SMS`	Phone number for auto-SMS 2FA

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

It worked
Partly
It didn't

What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free