App Attest

Device-backed app integrity verification for fraud prevention. Proves three things to your server: the request came from a genuine Apple device, running your genuine app, with an untampered payload.

When to Use This Skill

Use when you need to:

• Verify requests come from legitimate app instances (not modified/cloned apps)
• Prevent fraud in purchases, promotions, or competitive features
• Implement DCAppAttestService attestation or assertion flows
• Handle DeviceCheck 2-bit per-device state for promotional abuse
• Build server-side validation for attestation objects or assertion signatures
• Plan a gradual App Attest rollout for a large install base

Example Prompts