Run a live Apple report
The escape hatch: a raw Apple Campaign Management v5 Reporting request against the live API, bypassing the warehouse. Despite the verb this is read-only — which is why it needs only read scope. It burns Apple's quota and sits in the strictest rate-limit bucket. Prefer the warehouse endpoints; reach for this when you need a breakdown we don't model or data fresher than the last sync.
Required scope: read.
Authorization
bearerAuth An API key from Workspace → Settings → API keys, sent as Authorization: Bearer tsk_….
Authorization has two independent axes.
The scope is ranked — a key satisfies any requirement at or below its own tier:
read— see state. Never changes anything.write— propose changes (theactions/*endpoints), trigger audits and reports.admin— connection, account import, sync, targets and brief.
There is no approve scope. It was a rung once; it is not one now, and a key requested with it is rejected.
The approval grant (can_approve) is a separate boolean, not a rung. Deciding a queued proposal — approve, reject, revert — needs write and the grant. Keeping them on separate axes is what makes the review gate a control rather than a convention: a key that may propose is not automatically a key that may approve its own proposal.
A key is either org-scoped (reaches every account, optionally limited to a subset) or bound to a single account.
In: header
Path Parameters
The account's project UUID — from GET /accounts, NOT the Apple asaOrgId. Pass the literal current with an account-scoped key to use its bound account.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/v1/accounts/current/reports" \ -H "Content-Type: application/json" \ -d '{ "level": "campaigns", "purpose": "string", "request": { "property1": null, "property2": null } }'{}