Customer Account

Register this signed-in iPhone's App Attest key

Verifies Apple's attestation for the allowlisted Loppee iPhone app and atomically binds the key to the authenticated customer and exact registered installation. Browser, desktop, agent-key, and extensionless requests outside the explicit release policy are rejected.

post/v1/account/agent-location/app-attest/keys

Request

  • Base URL: https://loppee.com
  • URL: https://loppee.com/v1/account/agent-location/app-attest/keys
  • Auth: HTTP bearer

Headers

X-Loppee-Client-Platformstring required

Must be ios; browser Fetch Metadata headers are rejected.

X-Loppee-Installation-Idstring required

Must exactly match the signed-in customer's registered installation_id in the request body.

Request body

challenge_idstring uuid required
challengestring required
installation_idstring uuid required
key_idstring required
attestationstring required

Response

Register this signed-in iPhone's App Attest key response

status'registered' required
environment'production' | 'development' required
app_attest_registeredtrue required

Changes

No recorded changes to this operation across all 1 revision of this API.