Checkout/getApplePayDomainAssociation

Apple Pay domain association file

The domain-verification file Apple fetches to authorize Apple Pay on your domain.

GET/.well-known/apple-developer-merchantid-domain-association

Browser-safeCall from the customer’s browser with a publishable key — never your secret key.

Apple verifies that Apple Pay may run on a domain by fetching a signed association file from a fixed well-known path. kepa serves the correct file for you; your only job is to make sure this path is reachable on every domain that renders checkout.

Good to know

This is the one CNP endpoint that takes no credential — Apple fetches it unauthenticated, so there is no key to send.
Must be reachable at exactly /.well-known/apple-developer-merchantid-domain-association on each checkout domain.
If Apple Pay silently never appears, verify this path first — a missing file fails closed and quietly.

getApplePayDomainAssociation