For iOS developers

AASA Generator & Hosting for iOS

Generate an apple-app-site-association file for Universal Links, App Clips, Passkeys, and Handoff — and serve it at the right path with the right headers, on a domain you own. No nginx, no Cloudflare bot rules, no redirect chains.

Read the AASA Guide

$5/mo per app · Bring your own domain free · No credit card to start

Why a hosted AASA file matters

Apple's swcd daemon is unforgiving. The file must be served at /.well-known/apple-app-site-association over HTTPS, with Content-Type: application/json, no redirects, and no .json extension. A single misconfigured header silently breaks Universal Links — the link just opens Safari, with no error message anywhere. Most developers spend hours debugging this exactly once and never want to think about it again.

OrbitKit serves the file the way Apple wants it, every time. See the Universal Links docs for the full setup walkthrough.

What you get

One file, four capabilities

Universal Links (applinks), App Clips (appclips), Passkeys / Password AutoFill (webcredentials), and Handoff (activitycontinuation) all share the same file. Configure App IDs and path patterns once.

Served the way Apple wants

HTTPS, Content-Type: application/json, no redirects, no .json extension, no Cloudflare bot challenge. We also serve the legacy root path for third-party validators like Branch's checker and getuniversal.link.

128 KB size guard

Apple's swcd rejects files over 128 KB silently. OrbitKit validates the rendered output at config save time so a pathological combination of App IDs or path patterns never ships.

Auto SSL on your domain

Bring any domain you already own — we provision SSL automatically. Required for Universal Links and App Clips, since Apple expects the AASA at the domain root, not a sub-path.

How it works

  1. 01

    Enter your App IDs

    Format is TEAMID.com.example.app. The 10-character Team ID comes from your Apple Developer account; the bundle ID matches your Xcode target.

  2. 02

    Configure path patterns

    Specify which URLs open in your app: /products/*, NOT /admin/*, etc. Wildcards (*, ?) and exclusions are supported. Configure App Clip and Passkey App IDs in the same flow.

  3. 03

    Add Associated Domains in Xcode

    Signing & Capabilities → Associated Domains → applinks:your-domain.com. Add separate entries for www. if you want both subdomains to deep-link.

  4. 04

    Point your DNS

    Add the CNAME we show in the dashboard. We provision SSL automatically — you don't deal with cert renewals, Cloudflare bot challenges, or content-type headers.

  5. 05

    Deploy and verify

    curl -I https://your-domain.com/.well-known/apple-app-site-association should return HTTP/2 200 with content-type: application/json and no redirects. Then long-press a link in iOS Notes to confirm Universal Links activate.

AASA file questions

What is an apple-app-site-association file?

A small JSON document hosted on your domain that tells iOS which app to open for which URLs. Apple's swcd daemon fetches it via Apple's CDN and uses it to power Universal Links, App Clips, Passkeys (via webcredentials), and Handoff (via activitycontinuation).

Where does the AASA file need to be hosted?

At https://your-domain.com/.well-known/apple-app-site-association (the canonical path) over HTTPS, with Content-Type: application/json, no redirects, and no .json extension on the filename. OrbitKit also serves the legacy root path /apple-app-site-association for compatibility with third-party validators.

Can I host the AASA file on a sub-path?

No. Apple requires the file at the domain root. sites.orbitkit.io/your-slug/.well-known/apple-app-site-association won't work for Universal Links — you need a domain you own pointed at OrbitKit. Once configured, your pages live at https://your-domain.com/.

What's the maximum AASA file size?

Apple's swcd daemon refuses files over 128 KB. OrbitKit validates the rendered output against this limit when you save your AASA configuration, so a pathological combination of App IDs and path patterns can never ship.

Can I use OrbitKit to debug an AASA file I'm hosting elsewhere?

For debugging an existing setup, the Universal Links debugging checklist walks through every gotcha. If you'd rather just hand off the hosting, create an OrbitKit account and point your DNS at us.

Stop debugging AASA. Ship Universal Links.

Configure your App IDs and path patterns once. We handle the file, the headers, the SSL, the redirects.

$5/mo per app · Cancel anytime · 14-day money-back guarantee