Create a media identifier and private key

To communicate with the Apple Music Feed, MusicKit, ShazamKit, or other media services you’ll use a Media Services private key to sign one or more developer tokens.

Register a media identifier

In Certificates, Identifiers & Profiles, click Identifiers in the sidebar.
On the top left, click the add button (+), select Media IDs, then click Continue.
Enter a description for the identifier.
Enter a reverse-domain name style string for the identifier, then click Continue.
Enable each service you plan to use.
Review the information, then click Register.
Click Done.

Note : The identifier description is displayed as the app name to users when requesting access to Apple Music.

Use a Media Services private key to sign one or more tokens

Register a media identifier for each app or service.
Create and download a private key with the required media services enabled.
Associate the private key with the media identifier. You can associate two keys with each media identifier.
Get the key identifier (kid) to create a JSON Web Token (JWT) that you’ll use to communicate with the capabilities you enabled and visit Generating Developer Tokens.

If you suspect a private key is compromised, first create a new private key associated with the media identifier. Then, after transitioning to the new key, revoke the old private key.

Required role: Account Holder or Admin.