> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pushctl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Provider credentials

> Connect and replace Apple APNs and Firebase FCM credentials for an application.

Provider credentials let Pushctl submit messages to APNs or FCM. Only team owners and admins can manage them.

<Tabs>
  <Tab title="Apple APNs">
    Provide the bundle identifier, credential name, 10-character Apple Team ID, 10-character Key ID, `.p8` authentication key, and **Production** or **Sandbox** environment.

    <Warning>The environment must match the app build. Apple allows an APNs key to be downloaded only once.</Warning>
  </Tab>

  <Tab title="Firebase FCM">
    Provide the Android package ID, credential name, and complete service-account JSON. Pushctl requires `project_id`, `client_email`, and `private_key`.
  </Tab>
</Tabs>

## Add or replace credentials

Open **Application settings**, choose the platform, and submit its credential form. Adding a credential for an already configured platform replaces that platform's previous credential.

## Credential health

| Status     | Meaning                                                                        |
| ---------- | ------------------------------------------------------------------------------ |
| Unverified | The credential has not yet completed a successful verification or send         |
| Verified   | Pushctl most recently verified the credential successfully                     |
| Error      | The provider returned a credential-related error; inspect the recorded message |

<Tip>
  After rotating an Apple key or Firebase service account, replace the Pushctl credential before revoking the old one, then send to a test installation.
</Tip>