Service account setup
- In Google Cloud, create a service account and enable the Google Play Android Developer API.
- Download a JSON key.
- In Play Console → Users and permissions, invite the service account email and grant app / account permissions.
- Store the key securely. Do not commit it to source control.
Treat service-account keys as secrets. If a key is exposed, rotate it in Google Cloud and revoke the old key.
Credential precedence
Resolved in this order:
--credentials <path|json> (CLI / MCP flag)
GPS_CREDENTIALS or GOOGLE_PLAY_CREDENTIALS (path or inline JSON)
GOOGLE_APPLICATION_CREDENTIALS (path)
~/.config/gps/config.json → { "credentialsPath": "/path/to/key.json" }
Examples
Config file:
MCP
Pass credentials the same way:
Or via env on the MCP process:
Multi-account
For multiple service-account keys and a local app registry, see Multi-account and apps.
Write safety