Skip to main content

API & Platform Settings

Manage API key management and platform-specific settings. Consists of API Key, Android, and iOS tabs.

API Key

Manage the keys required for server integration.

FieldDescription
Service KeyThe service key used for API calls. Can be copied to clipboard via the copy button.
Secret KeyThe secret key used for API authentication. Can be copied to clipboard via the copy button.
info

Be careful not to expose the Secret Key externally. You can issue a new key through the refresh button.

Android Settings

Manage settings required for Android In-App Purchase (IAP) receipt verification.

FieldDescription
Package NameEnter the Android app package name. (Required, e.g., com.example.game) Used to verify package name match during receipt verification.
License KeyEnter the RSA public key issued from Google Play Console. (Required) Used for receipt signature verification.
Auth Key FileUpload the JSON auth key file for the Google Play service account. (Required) Used for Google Play Developer API integration.
info

Package Name and License Key are used for Google Play receipt verification. The Package Name verifies package name match to prevent receipt fraud, and the License Key is used to verify the receipt signature from Google Play. The License Key can be found in Google Play Console > Monetization setup. The Auth Key File can be generated and downloaded from Google Cloud Console > IAM & Admin > Service Accounts as a JSON key.

iOS Settings

Manage settings required for iOS In-App Purchase (IAP) receipt verification and App Store Server API integration.

FieldDescription
Bundle IdentifierEnter the iOS app bundle identifier. (Required, e.g., com.example.game) Used to verify bundle ID match during receipt verification.
Application IDEnter the app ID found in App Store Connect. (Required)
Team IDEnter the team ID of the Apple Developer account. (Required)
Service IDEnter the service ID used for App Store Server API integration.
Key IDEnter the key ID used for App Store Server API authentication.
Master PasswordEnter the app-specific password sent to Apple servers for subscription receipt verification.
Key FileUpload the key file (.p8) used for App Store Server API authentication. (Required)
info

Bundle Identifier and Master Password are used for iOS IAP receipt verification. The Bundle Identifier verifies bundle ID match to prevent receipt fraud, and the Master Password is sent to Apple's server (verifyReceipt) for subscription product verification. The Key File (.p8) and Key ID can be generated and downloaded from Apple Developer > Certificates, Identifiers & Profiles > Keys.

StoreKit 2 (JWS) Validation

Validating the signed transaction (JWS) of Unity IAP 5.0 (StoreKit 2) does not require a Key File (.p8). Since the certificate chain embedded in the JWS is validated locally against the Apple Root CA G3, the Key ID and Key File are used only for Sign in with Apple (social login).

App Store Server Notifications (Webhook)

To receive events such as refunds and subscription changes from Apple in real time, register the Webhook URL at the bottom of the iOS settings in App Store Connect. This URL is generated automatically per game and can be copied to the clipboard using the copy button.

https://service-api.playnanoo.com/webhook/apple/{gameId}

{gameId} is automatically replaced with the game channel ID. Copy the actual URL shown in the console using the copy button.

StepDescription
1Go to App Store Connect > Select app > App Information > App Store Server Notifications
2Enter the Webhook URL above in Production Server URL
3Enter the same URL in Sandbox Server URL
4Select "Version 2" for Notification Version and save
info

Since the Webhook operates on a per-game (per-app) basis, refund tracking is applied simply by registering the URL, regardless of the SDK version. The Production / Sandbox distinction is determined automatically by the environment field in the payload sent by Apple.