# Associated Domains Entitlement The associated domains for specific services, such as shared web credentials, universal links, and App Clips. ## Discussion This key specifies a list of domains for each enabled service. Add an associated domain to the list in the following format: ```swift : ``` Services include: - `webcredentials`: Use this service for shared web credentials. - `applinks`: Use this service for universal links. - `activitycontinuation`: Use this service for Handoff. - `appclips`: Use this service for an App Clip. > Note: > In macOS 11 and later and iOS 14 and later, apps request `apple-app-site-association` files from an Apple-managed content delivery network (CDN) specifically for associated domains, instead of directly from your web server. If the CDN has an old version of the file, or doesn’t already have a copy of the file, it connects to your web server to obtain the latest version. If you use a private web server, which is unreachable from the public internet, while developing your app, enable the alternate mode feature to bypass the CDN and connect directly to your server. To do this, add a query string to your associated domains entitlement, as shown in the following example: ```console :?mode= ``` Where `alternate mode` is one of the following: - `developer`: Specifies that only devices in developer mode can access the domain. In this mode, you can use any valid SSL certificate on your web server, including a certificate that the system doesn’t trust. Make sure you don’t expose your users to security issues, such as machine-in-the-middle attacks. As an additional precaution, only apps that you sign with a development profile can use developer mode, and users must opt-in on any device they use. - `managed`: Specifies that only devices using a mobile device management (MDM) profile can access the domain. This mode requires consent from the MDM administrator. - `developer+managed`: Specifies that only devices that are in both `developer` and `managed` modes can access the domain. To enable associated domains, add the Associated Domains capability to your target in Xcode. For more information, see . > Important: > For watchOS apps, you must add the Associated Domains capability to the WatchKit Extension target. ## See Also --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)