---
title: "Download the .mobileprovision"
method: GET
path: "/appsec/7.0/apple/profiles/{id}/download"
tags: ["Profiles"]
---

# Download the .mobileprovision

`GET /appsec/7.0/apple/profiles/{id}/download`

## Request

- Base URL: `https://cloud.codenameone.com`
- URL: `https://cloud.codenameone.com/appsec/7.0/apple/profiles/{id}/download`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/codenameone/apis/codename-one-apple-signing-service/docs/appsec/7.0/apple/profiles/:id/download/get.ts> (a function with typed inputs; its response is checked against the schema)

Fetches the current provisioning-profile bytes fresh from Apple.

## Path parameters

- `id` integer, required

## Response `200`

The .mobileprovision bytes

## Other responses

- `403`: Caller is anonymous / not authenticated.
- `404`: Apple no longer has the object -- it was deleted in the Developer portal. A reconcile brings us back in step.
- `409`: The account's App Store Connect API key is missing, was rejected by Apple (revoked, or the Key ID / Issuer ID do not match the .p8), or lacks the access this call needs. The developer has to fix the stored key -- retrying will not clear it. The body is a plain-text explanation written for them.
- `422`: The stored key is fine but Apple refused this particular request (for example "You already have a current Distribution certificate"). The body is a plain-text explanation, carrying Apple's own wording where Apple supplied it.
- `429`: Apple is rate-limiting App Store Connect requests for this team. Retrying after a pause is correct.
- `502`: App Store Connect is down or unreachable, so the call could not be completed. This is the only genuinely upstream failure and the only one worth retrying automatically; anything the developer must act on comes back as 409 or 422 instead.

## Changes

- **2026-08-19** `f0b48d0af96f`: 3 info
  - added the non-success response with the status `404`
  - added the non-success response with the status `422`
  - added the non-success response with the status `429`

[Operation history](https://skmtc.dev/codenameone/apis/codename-one-apple-signing-service/changes/appsec/7.0/apple/profiles/:id/download/get.md)

---

[API](https://skmtc.dev/codenameone/apis/codename-one-apple-signing-service.md) - [All operations](https://skmtc.dev/codenameone/apis/codename-one-apple-signing-service/llms.txt) - [OpenAPI document](https://skmtc.dev/codenameone/apis/codename-one-apple-signing-service/revisions/f0b48d0af96f?raw)