# POST /verifyReceipt is deprecated

sandbox.itunes.apple.com deprecated POST /verifyReceipt without giving a shutdown date yet.

The provider has deprecated the POST /verifyReceipt endpoint without announcing a shutdown date. Subsequent calls to this endpoint will fail. This change impacts all integrations relying on receipt validation through this route.

## What to use instead

Migrate to the App Store Server API (api.storekit.itunes.apple.com) using endpoints such as GET /inApps/v1/transactions/{transactionId} or GET /inApps/v2/history/{transactionId} to verify signed transactions, or validate receipts directly on your server following Validating receipts on the device. Switching involves more than changing an identifier, as it requires adopting an In-App Purchase key and signed JWS transactions rather than a shared secret.

Moving off verifyReceipt means adopting the App Store Server API, with an In-App Purchase key and signed (JWS) transactions instead of the shared secret.

- API: sandbox.itunes.apple.com (sandbox.itunes.apple.com)
- Kind: Endpoint removal
- Takes effect: no date given yet
- Calls after that day: fail
- Calls it hits: `POST /verifyReceipt`
- Source: [Announcement](https://developer.apple.com/documentation/appstorereceipts.md)
- Verified: October 29, 2026, against sandbox.itunes.apple.com's own pages
- Page: https://www.okapi.bot/providers/sandbox-itunes-apple-com/breaking-changes/post-verifyreceipt-is-deprecated/

## sandbox.itunes.apple.com's words

> endpoint is deprecated. To validate receipts on your server, follow the steps in

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent
