ASOScan Public API
documentation.
Read the App Store Optimization (ASO) data in your account from dashboards, scripts, and internal tools. Read-write keys can also add tracked keywords and competitors. The API is self-serve on every paid plan, with scoped keys and a monthly credit allowance.
Your first request.
- Create an API key in Settings → API access.
- Choose read-only or read-write scope.
- Send the key as a Bearer token to the versioned base URL.
curl https://asoscan.com/api/public/v1/apps
-H "Authorization: Bearer asosk_live_…"Scoped keys, shown once.
API keys start with asosk_live_ and are stored hashed. Read-only keys can call every GET endpoint. Read-write keys can also add tracked keywords and competitors. Revoke a key from settings at any time.
Base URL: https://asoscan.com/api/public/v1
The data behind your ASO workflow.
Apps & metadata
Tracked apps, listing metadata, metadata history, category rank, and rating history.
GET /apps/{id}/metadataKeywords
Tracked rankings, research, history, metrics, opportunities, and keyword spy.
GET /apps/{id}/keywordsCompetitors
Read tracked competitors or add one with a write-scoped key.
POST /apps/{id}/competitorsReviews & insights
Paginated reviews, sentiment distribution, topics, feature requests, and bugs.
GET /apps/{id}/reviews/insightsPredictable monthly usage.
Solo includes 1,500 monthly credits, Pro 5,000, Business 10,000, Agency 50,000, and Enterprise has an unlimited allowance. Most reads cost one credit, opportunities and writes cost two, and live keyword research costs eight. Failed validation and not-found responses do not consume credits; GET /usage is free.
Errors use Request for Comments (RFC) 7807 Problem Details. Responses also include credit-limit, remaining, used, and reset headers so your integration can monitor allowance without guessing.
Verify signed events.
JSON webhook deliveries include X-ASOScan-Event, X-ASOScan-Delivery, and a Hash-based Message Authentication Code using SHA-256 (HMAC-SHA256) in X-ASOScan-Signature. Verify the signature against the raw request body and reject stale timestamps. Slack and Microsoft Teams destinations use their incoming-webhook URLs instead of the signed JSON envelope.
Use the tools you already know.
ASOScan does not ship first-party client software development kits yet. Generate a typed client from the OpenAPI contract, or import the curated Postman collection into Postman, Insomnia, or Bruno.
Documentation updated July 29, 2026.