How to get approval for com.apple.developer.network-extension.content-filter entitlement on macOS (Mac App Store)?

Question

Created 4d

Replies 1

Boosts 0

Participants 2

I'm building a gambling addiction recovery app for macOS that uses NEFilterDataProvider to block 208,000+ gambling domains system-wide. The app is already live on the iOS App Store under the same developer account.

I need the restricted entitlement com.apple.developer.network-extension.content-filter to distribute via the Mac App Store.

I submitted a request through Developer Support > Development and Technical Information > Rights/Entitlements (case #102914968660) on June 14th — 9 days ago with no response yet.

My questions:

Is this the correct channel for requesting this entitlement for Mac App Store distribution?
Has anyone successfully obtained this entitlement? What channel/process worked for you?
Is there a typical turnaround time I should expect?

Any guidance appreciated.

Thanks

Answered by DTS Engineer in 895208022

I need the restricted entitlement com.apple.developer.network-extension.content-filter to distribute via the Mac App Store.

There is no such entitlement. The entitlement is actually called com.apple.developer.networking.networkextension. Its value is an array, and one of the possible array elements is content-filter-provider [1]. This entitlement is restricted but not managed [2]. It’s available to any paid developer team.

There’s a complex backstory to this entitlement, which I explain in Network Extension Framework Entitlements.

Also, there’s a bunch of subtleties around NE provider distribution; see TN3134 Network Extension provider deployment for the details.

I’m presuming that you were lead down this incorrect path by an LLM. If it was an Apple LLM, please let me know because I’d like to make sure it doesn’t happen again.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Another possible value is content-filter-provider-systemextension. Use this when using Developer ID to sign your product for direct distribution. See Exporting a Developer ID Network Extension for the backstory on that.

[2] Using the terms from TN3125 Inside Code Signing: Provisioning Profiles.

Answer 1

DTS Engineer OP

Apple

3d

Recommended

I need the restricted entitlement com.apple.developer.network-extension.content-filter to distribute via the Mac App Store.

There is no such entitlement. The entitlement is actually called com.apple.developer.networking.networkextension. Its value is an array, and one of the possible array elements is content-filter-provider [1]. This entitlement is restricted but not managed [2]. It’s available to any paid developer team.

There’s a complex backstory to this entitlement, which I explain in Network Extension Framework Entitlements.

Also, there’s a bunch of subtleties around NE provider distribution; see TN3134 Network Extension provider deployment for the details.

I’m presuming that you were lead down this incorrect path by an LLM. If it was an Apple LLM, please let me know because I’d like to make sure it doesn’t happen again.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Another possible value is content-filter-provider-systemextension. Use this when using Developer ID to sign your product for direct distribution. See Exporting a Developer ID Network Extension for the backstory on that.

[2] Using the terms from TN3125 Inside Code Signing: Provisioning Profiles.