GSX2 Token / Documentation / Endpoint URLs ?

Hi guys,

I’m integrating my ERP to Apple GSX API, and I have some doubts. 

My customer sent to my this link (https://eservicecentral.apple.com/), which I have a successful login.

At this link, I can see swagger documentation, but I don’t have enough information about the first token.

Googling I saw another link (gsxapi.apple.com) and it seems to be an old API using WSDL, not JSON/RESTFUL.

  • What is the main URL from API (the newer one)?

  • How do I authenticate to this API? Where do I get first token? Where I can find documentation about these steps?

  • I saw a FAQ (https://gsxapi.apple.com/apidocs/prod/html/WSFaq.html), but it says to generate a CSR and use a WSDL API, which I believe is outdated, because “eservicecentral” uses an JSON API.

  • Do I need to generate a CSR or not for this newer API (json)?

  • I saw that you have 3 different environments (GSXIT, GSXUT and GSX). Does the newer API have the same sandbox/production environments also? How do I access them? What are the main URLs?

Where I get the correct instruction to connect to “eservicecentral”? API DOCs don’t say much.

  I need some help to do my first connection and to understand the processes I need to follow.

Also, I received this “gsx2.apple.com” to see things at browser.

Are there any other URL’s that I should be aware of?

Hi Milenial,

As a developer with 5 years of experience in API integration and development, I can provide some insights based on my expertise:

  1. Main URL for the Newer API: For Apple GSX API, the newer API URL is typically associated with their JSON/RESTful services hosted through the eServiceCentral platform. The URL you mentioned (https://eservicecentral.apple.com/) is where the current API documentation and endpoints should be referenced.

  2. Authentication and Token: The initial authentication usually involves generating a Client Secret or an API Key. If you’re seeing the need for a CSR (Certificate Signing Request) in the older WSDL documentation, it may not apply to the JSON/RESTful version. Check with your customer or contact Apple support for specific steps related to the newer API authentication process, as they might require OAuth 2.0 or JWT-based authentication.

  3. CSR Requirement: For JSON-based APIs, generating a CSR might not be necessary unless stated explicitly in the documentation. This step is more common for older, SOAP-based APIs. Verify the documentation on eServiceCentral for exact authentication steps for the newer format.

  4. Sandbox/Production Environments: The three different environments (GSXIT, GSXUT, and GSX) are often used for testing and production. Confirm with Apple support whether the eServiceCentral JSON API maintains these sandbox environments. Typically, they provide endpoints or configuration settings for test and production access.

  5. Access and Documentation: Your main resource should be the Swagger documentation available through the eServiceCentral link. If you find it lacking in details, I recommend contacting Apple’s API support for developer access guides and any missing pieces in the documentation.

  6. Additional URLs: Keep an eye on gsx2.apple.com as this may be linked to browser-based access or a part of the older API suite. Double-check whether there are updated links for specific tasks or endpoints.

I hope this helps clear up some of the confusion. Let me know if you need further assistance with any of the API integration steps.

Best regards,

Aman

Hey @Aman1915 @milenial,

We’re currently working with an AASP who asked us to integrate our ERP with the Apple GSX API. It’s the first time for both of us, and we’re a bit stuck on how to properly get started.

The AASP contacted their regional manager, who confirmed that an NDA and an Apple Developer Account would be necessary. However, he hasn’t handled this type of integration before and is still seeking internal guidance.

That was a few months ago, and due to his workload, the AASP hasn’t heard back from him yet.

In the meantime, we enrolled in the Apple Developer Program and opened a support case, but we were kindly redirected to the forums, as the support team said our case goes beyond what they can assist with directly.

So now we’re trying to understand:

  • What steps need to be completed by the AASP?

  • What are the steps we, as the ERP provider, need to take in order to receive API access?

  • Are there any specific documents, applications, or technical requirements we should prepare in advance?

We’d really appreciate any guidance or insight from others who have gone through this process — or even partial answers to help us move forward.

Thanks a lot in advance, Christian

GSX2 Token / Documentation / Endpoint URLs ?
 
 
Q