Enabled Features and Limits
Depending on your Approov subscription, some account features may not be enabled and some account properties have limits on how many items can be added.
You can view the enablement status and limits for your account with:
approov account -getInfo
These features and limits are not user configurable. Contact Approov support if you need a feature enabled or disabled, or if you need an account limit changed.
Feature Availability
| Feature | What it tells you | Learn more |
|---|---|---|
| AppAttest | Whether the account can use Apple's App Attest integration. | Apple App Attest Integration |
| JWE Tokens | Whether the account can issue encrypted JWE Approov tokens. | JWE Token Encryption |
| Key Sets | Whether the account can manage signing or encryption keys with key sets. | Managing Key Sets |
| Measurements | Whether Offline Security Mode is enabled for the account. | Offline Security Mode |
| Play Integrity | Whether the account can use Google's Play Integrity integration. | Google Play Integrity |
| Proxied Attestations | Whether the account can route attestation requests through a proxy. | Contact Approov support for account-specific setup. |
| Secure Strings | Whether runtime secure strings are enabled. | Secure Strings |
| Token Lifetime | The lifetime, in seconds, given to Approov tokens issued by the service. | Token Lifespan |
| Web Protection | Whether the account can protect APIs called from web apps. | Web Protection Integration |
Account Limits
| Limit | What it controls | Learn more |
|---|---|---|
| API Count | Maximum number of API domains that may be configured in the account. | Managing API Domains |
| App Signing Certificate Count | Maximum number of app signing certificates that may be added to the account. | App Signing Certificates |
| Attestations per Minute | Maximum permitted attestations per minute and per attester. If a limit is set, requests beyond the limit return valid Approov tokens by default. | Contact Approov support if this limit affects your rollout. |
| Attestations per Month | Maximum permitted attestations per month. If a limit is set, requests beyond the limit return valid Approov tokens by default. | Contact Approov support if this limit affects your rollout. |
| Custom Devices Count | Maximum number of devices with custom device policies. | Managing Devices |
| Devices per Month | Maximum number of unique devices per month. If a limit is set, devices beyond the limit get valid Approov tokens by default. | Metrics Graphs |
| Force Fail App Count | Maximum number of app versions that can be forced to fail. | ForceFail Command |
| Force Fail Device Count | Maximum number of devices that can be forced to fail. | Forcing a Device ID to Fail |
| Force Pass Device Count | Maximum number of devices that can be forced to pass. | Forcing a Device ID to Pass |
| Key Set Size | Maximum number of keys that can be added to a key set when key sets are enabled. | Managing Key Sets |
| Predefined Secret Count | Maximum number of predefined secure strings in the account. | Managing Predefined Secure Strings |
| Registration Count | Maximum number of app registrations. App registrations using app signing certificates do not count towards this limit. | Managing Registrations |
| Throttle Attestations at Load | Whether attester load is used to limit the number of attestations for the account. | Contact Approov support for account-specific behavior. |
| User Role Count | Maximum number of live user roles for the account. | User Management |
Explore Other Approov Features
Once the core app, API domain, certificate, and backend integration flow is working, use this table to decide what to explore next. Some items depend on the feature availability or limits shown by approov account -getInfo.
| Area | Why explore it | Where to go |
|---|---|---|
| Security Policies | Change the conditions under which an app receives a valid Approov token. | Security Policies |
| App Signing Certificates | Use signing identities to auto-register official apps and support development builds. | App Signing Certificates |
| Managing Devices | Apply custom policies to specific devices, or force devices to pass or fail during testing. | Managing Devices |
| Dynamic Pinning | Manage API channel protection so Approov tokens and secrets are not exposed by interception. | Dynamic Pinning |
| Secure Strings | Protect API keys or other runtime secrets when backend token verification is not possible. | Secure Strings |
| Key Sets | Manage additional keys for signing or encrypting Approov tokens beyond the default account secret. | Managing Key Sets |
| User Management | Add, expire, and revoke team access to the Approov account. | User Management |
| Automated CLI Usage | Use the Approov CLI safely from CI or other automated systems. | Automated Approov CLI Usage |
| Development Key | Force selected development builds to pass when testing environments resign the app. | Using a Development Key |
| Metrics Graphs | Review live and historical app, device, protection, and billing metrics. | Metrics Graphs |
| Service Monitoring | Receive summary emails and monitor API domains for availability and certificate changes. | Service Monitoring |
| Token Binding | Bind Approov tokens to other request data, such as a user authorization token. | Token Binding |
| Application Installation Attributes | Attach backend-issued attributes to an app installation and include them in later Approov tokens. | Application Installation Attributes |
| Device Filters | Highlight devices with particular characteristics in metrics and apply filter-driven actions. | Device Filters |
| Message Signing | Sign requests for stronger message integrity alongside Approov token verification. | Installation Message Signing and Account Message Signing |
| Custom JWTs | Build custom payloads in the app while keeping signing keys in the Approov cloud. | Custom JWTs |
| Android Automated Launch Detection | Detect Android apps launched by automation rather than by a human user. | Android Automated Launch Detection |
| Security Rules Version Management | Determine which particular version of the security rules your account is running. Normally this will be managed by Approov for you, but you may use this to explicitly select particular versions if required. | Security Rules Version Management |
| Platform Attestation | Add platform-level checks such as Apple DeviceCheck, Apple App Attest, or Google Play Integrity. | Apple DeviceCheck, Apple App Attest, and Google Play Integrity |
| Web Protection | Protect APIs called from web apps using supported third-party web protection services. | Web Protection Integration |