enroll_play_app_signing
Read, or set, an app's Play App Signing enrolment. An app that is NOT enrolled CANNOT accept an .aab: upload_bundle returns 200 and Play then rejects the bundle during processing (error 3008), leaving a pending upload reference, no artifact, and an unexplained 400 from start_rollout. Call with action="status" first — that is read-only. Enrolment is PERMANENT, sets the app's signing identity for the life of the app and gives Google custody of the app signing key: get the user's explicit agreement to this specific action before enrolling, and ask whether Google should generate a fresh key or reuse another app's deployment key. There is no way to ship an .aab without it.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | No | "status" (default, read-only) or "enroll". | |
| play_app_id | Yes | Numeric Play app id from the Play Console URL (.../app/<this>/...). NOT the package name. | |
| developer_id | Yes | Numeric Play Console developer id (from the Play Console URL). | |
| confirm_permanent | No | Required for action="enroll": must be exactly "yes". Only set it once the USER has agreed to this specific permanent change — not on a general approval to ship. | |
| google_account_email | Yes | The signed-in Google account email that owns this Play Console developer account. Call list_accounts first and confirm with the user — do not guess. | |
| notification_message | No | Short user-facing sentence for this action if the follow-up reply fails. Plain text only; do not mention template syntax or variable names. | |
| reuse_deployment_key_app_id | No | Optional: numeric play_app_id of an existing app whose deployment key this app should share. Leave empty for Google to generate a fresh signing key, which is the right default unless the apps genuinely need a shared signing identity. The user's call. |