S2S (server-to-server notifications)

Apple's App Store Server Notifications: HTTPS POSTs Apple sends to a URL you configure, one per subscription lifecycle event (purchase, renewal, cancellation, refund). Version 2 (the current one) delivers each event as a signed JWS. Apple allows exactly one production URL per app.

What Apple requires of the endpoint, per its documentation: TLS 1.2 or later; a port of either 443 or something at or above 1024; and a success response, meaning any status from 200 to 206. Servers behind an IP allow list need Apple's 17.0.0.0/8 subnet permitted, in both sandbox and production.

A 4xx or 5xx response makes Apple retry. In production it retries five times, at 1, 12, 24, 48 and 72 hours after the previous attempt. In sandbox there are no retries at all: one attempt, then the event is gone.

The one-URL-per-app limit (one production, one sandbox) is the constraint that shapes every architecture on top of it. If two systems need the same events, whichever one Apple posts to has to forward them.

See: Server Notifications V2 setup guide →