Platform setup

A hosted AdTo link looks like https://{username}.adto.app/{slug}. For a tap to open your installed app without a browser round trip, iOS needs Universal Links and Android needs App Links. Both rely on a file served from your link domain, and AdTo serves those files for you from the app records in the dashboard.

Register the app first in Dashboard → Apps (see Apps). The fields that matter here:

Field	Validation
iOS bundle ID	Looks like com.company.app
Apple Team ID	10 uppercase letters or digits (Apple Developer → Membership)
Android package	Looks like com.company.app
SHA-256 fingerprints	One per line, 32 colon-separated hex pairs, stored uppercase. Include the Play App Signing key, not only the debug key.
iOS / Android app scheme	Letters, digits and + - . only, without ://. http, https and javascript are rejected.

Both association files are built for the whole account: every app with the required identifiers appears in them.

iOS: Universal Links

1. Save the bundle ID and the Team ID in the app record. The file goes live once both are saved.

2. Add the Associated Domains entitlement. Create ios/Runner/Runner.entitlements if it does not exist, and make sure every build configuration and flavor uses an entitlements file that carries it.

   ios/Runner/Runner.entitlements

   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
       <key>com.apple.developer.associated-domains</key>
       <array>
           <string>applinks:{username}.adto.app</string>
       </array>
   </dict>
   </plist>

   Replace {username} with your AdTo username. Use the explicit host, not a wildcard: for applinks:*.adto.app iOS fetches the association file from the parent domain, and the apex serves none (it answers 400 because no username can be read from the host), so the wildcard form never verifies. Enable the Associated Domains capability on the App ID in your Apple Developer account. With a custom link domain, add applinks:go.yourbrand.com as a second entry: it serves the same file.

3. Rebuild and reinstall the app. iOS downloads and verifies the association file at install or update time, so an already-installed app only picks it up after a reinstall or an update.

4. Test by tapping a real link from Messages or Notes. Typing the URL into Safari’s address bar does not open the app.

No Info.plist or AppDelegate change is needed. Links arrive through the app_links plugin, which already handles Universal Links and custom schemes.

What AdTo serves. https://{username}.adto.app/.well-known/apple-app-site-association is built from every app in the account that has both a bundle ID and a Team ID:

{
  "applinks": {
    "apps": [],
    "details": [
      {
        "appIDs": ["ABCDE12345.com.example.myapp"],
        "components": [{ "/": "/*" }]
      }
    ]
  },
  "webcredentials": {
    "apps": ["ABCDE12345.com.example.myapp"]
  }
}

Every path on the domain is claimed (/*). The webcredentials block lists the same app IDs, so password AutoFill can also associate the domain with your app. When no app in the account has both identifiers, the file answers 404 {"error":{"code":"not_found","message":"Configuration not found"}}.

Android: App Links

1. Save the Android package and at least one SHA-256 fingerprint in the app record. The file goes live once both are saved. Include the certificate Play App Signing uses for the builds your users install, plus the debug or upload key for the builds you test with. keytool -list -v -keystore <file> prints a fingerprint.

2. Add an HTTPS intent filter with android:autoVerify="true" to your launcher activity. Intent filters do not support wildcard hosts, so list each host explicitly.

   android/app/src/main/AndroidManifest.xml

   <intent-filter android:autoVerify="true">
       <action android:name="android.intent.action.VIEW" />
       <category android:name="android.intent.category.DEFAULT" />
       <category android:name="android.intent.category.BROWSABLE" />
       <data android:scheme="https" android:host="{username}.adto.app" />
   </intent-filter>

   With a custom link domain, add <data android:scheme="https" android:host="go.yourbrand.com" /> to the same filter.

3. Rebuild and reinstall. Android verifies the domain at install or update time. Check the result with:

   adb shell pm get-app-links com.example.myapp

   Expect verified next to your host. A none or legacy_failure state usually means the fingerprint of the installed build is not in the file.

What AdTo serves. https://{username}.adto.app/.well-known/assetlinks.json is built from every app in the account that has a package name:

[
  {
    "relation": ["delegate_permission/common.handle_all_urls"],
    "target": {
      "namespace": "android_app",
      "package_name": "com.example.myapp",
      "sha256_cert_fingerprints": ["AA:BB:CC:DD:EE:FF:00:11:22:33:44:55:66:77:88:99:AA:BB:CC:DD:EE:FF:00:11:22:33:44:55:66:77:88:99"]
    }
  }
]

An app with a package but no saved fingerprints appears with "sha256_cert_fingerprints": [], which never verifies. When no app has a package, the file answers 404 {"error":{"code":"not_found","message":"Configuration not found"}}.

Until verification succeeds, taps still open the app. When the app record has both an Android scheme and a package, the link service answers a Chrome-family browser with an intent:// redirect that carries your scheme and package, with the store as the browser fallback. The app then receives {scheme}://{username}/{slug}?dtg_click={id} (or {scheme}://{deep-link-path}?dtg_click={id} for links with an Android deep-link path). The bounce is skipped for in-app browsers and for browsers whose user agent carries no Chrome/ token; those get a plain redirect. Details are on How a tap is routed.

Custom schemes

A custom scheme is optional. Save it in the app record (myapp, without ://) and register it on both platforms:

ios/Runner/Info.plist

<key>CFBundleURLTypes</key>
<array>
    <dict>
        <key>CFBundleTypeRole</key>
        <string>Editor</string>
        <key>CFBundleURLSchemes</key>
        <array>
            <string>myapp</string>
        </array>
    </dict>
</array>

android/app/src/main/AndroidManifest.xml

<intent-filter>
    <action android:name="android.intent.action.VIEW" />
    <category android:name="android.intent.category.DEFAULT" />
    <category android:name="android.intent.category.BROWSABLE" />
    <data android:scheme="myapp" />
</intent-filter>

How AdTo uses it:

• A link without a deep-link path opens myapp://{username}/{slug}?dtg_l={username}/{slug}. A link with a deep-link path opens myapp://{path}?dtg_l={username}/{slug}, so the path’s first segment becomes the URI authority. The dtg_l tag (after dtg_click when present) is how the SDK knows which link it was. Universal Links and App Links always deliver the https://{username}.adto.app/{slug} form instead.
• On iOS a scheme only opens from a direct user tap, such as the “Open in app” buttons on AdTo’s pages. A server redirect to a scheme never launches an iOS app; Universal Links are the only automatic mechanism.
• On Android the scheme, together with the package, enables the intent:// bounce described above.

Scheme URLs and the SDK's parser

The SDK reads the link from dtg_l, never from the URL’s shape, so myapp://products/42?…&dtg_l=acme/launch reports acme / launch and your app routes on the path from DectogLinkClick.originalUrl. A scheme URL without dtg_l, such as your app’s own myapp://products/42 from elsewhere, is not an AdTo link: it is emitted with an error and nothing is logged. See Initialize and handle links.

Verify from the dashboard

Each platform section of the app editor has a Verify button next to the file path. It fetches the saved association file for the whole account (through the ?u={username} form on the dashboard host) and shows a one-line summary:

File	Messages
Universal Links	“✓ N app ID(s) served” or “✕ No app IDs configured”
App Links	“N package(s), SHA-256 fingerprints present”, “N package(s), MISSING fingerprints” or “No packages configured”

Both report Endpoint replied <status>: … or Fetch failed: … when the fetch fails. The check reads what is saved, not what you typed into the form, so save first.