Configure capabilities

Create a media identifier and private key

To communicate with the Apple Music API, MusicKit, or ShazamKit, you’ll use a Media Services private key to sign one or more developer tokens.

Register a media identifier

  1. In Certificates, Identifiers & Profiles, click Identifiers in the sidebar.

  2. On the top left, click the add button (+), select Media IDs, then click Continue.

  3. Enter the app name as the description.

    The app name is displayed to users when requesting access to Apple Music.

  4. Enter a reverse-domain name style string for the identifier, then click Continue.

  5. Review the information, then click Register.

  6. Click Done.

Use a Media Services private key to sign one or more tokens

  1. Register a media identifier for each app that uses the Apple Music API, MusicKit, or ShazamKit.

  2. Create and download a private key with MusicKit and/or ShazamKit enabled.

  3. Associate the private key with the media identifier. You can associate two keys with each media identifier.

  4. Get the key identifier (kid) to create a JSON Web Token (JWT) that you’ll use to communicate with the capabilities you enabled and visit Generating Developer Tokens.

If you suspect a private key is compromised, first create a new private key associated with the media identifier. Then, after transitioning to the new key, revoke the old private key.

Required role: Account Holder or Admin.