Skip to main content

Service account setup

  1. In Google Cloud, create a service account and enable the Google Play Android Developer API.
  2. Download a JSON key.
  3. In Play ConsoleUsers and permissions, invite the service account email and grant app / account permissions.
  4. Store the key securely. Do not commit it to source control.
Treat service-account keys as secrets. If a key is exposed, rotate it in Google Cloud and revoke the old key.

Credential precedence

Resolved in this order:
  1. --credentials <path|json> (CLI / MCP flag)
  2. GPS_CREDENTIALS or GOOGLE_PLAY_CREDENTIALS (path or inline JSON)
  3. GOOGLE_APPLICATION_CREDENTIALS (path)
  4. ~/.config/gps/config.json{ "credentialsPath": "/path/to/key.json" }

Examples

Config file:

MCP

Pass credentials the same way:
Or via env on the MCP process:

Multi-account

For multiple service-account keys and a local app registry, see Multi-account and apps.

Write safety