English Français العربية

App Store Connect MCP

Official registry Other

MCP server for App Store Connect: releases, TestFlight, reviews, reports. Read-only by default.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

MCPB package https://github.com/idoo/app-store-connect-mcp/releases/download/v0.14.0/app-store-connect-mcp-0.14.0.mcpb
OCI package ghcr.io/idoo/app-store-connect-mcp:0.14.0
Claude Code 
claude mcp add app-store-connect-mcp -e 'ASC_KEY_ID=<ASC_KEY_ID>' -e 'ASC_ISSUER_ID=<ASC_ISSUER_ID>' -e 'ASC_PRIVATE_KEY=<your asc_private_key>' -e 'ASC_VENDOR_NUMBER=<ASC_VENDOR_NUMBER>' -e 'ASC_MCP_ALLOW_WRITES=0' -- docker run -i --rm ghcr.io/idoo/app-store-connect-mcp:0.14.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "app-store-connect-mcp": {
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "ghcr.io/idoo/app-store-connect-mcp:0.14.0"
            ],
            "env": {
                "ASC_KEY_ID": "<ASC_KEY_ID>",
                "ASC_ISSUER_ID": "<ASC_ISSUER_ID>",
                "ASC_PRIVATE_KEY": "<your asc_private_key>",
                "ASC_VENDOR_NUMBER": "<ASC_VENDOR_NUMBER>",
                "ASC_MCP_ALLOW_WRITES": "0"
            }
        }
    }
}

Environment variables

  • ASC_KEY_ID required App Store Connect API key ID
  • ASC_ISSUER_ID Issuer ID (omit for an Individual API key)
  • ASC_PRIVATE_KEY required secret Contents of the .p8 key (PEM or base64 PEM)
  • ASC_VENDOR_NUMBER Vendor number for sales and finance reports
  • ASC_MCP_ALLOW_WRITES Set to 1 to expose write and destructive tools

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. app-store-connect-mcp
  2. Install
  3. Compared
  4. Security
  5. What it does
  6. License

app-store-connect-mcp

MCP server for App Store Connect. Read-only by default, and it asks before anything goes public. The binary is asc-mcp.

Install

Paste this into whatever AI is writing your app right now (we won't tell):

Set up the app-store-connect-mcp server for me: https://github.com/idoo/app-store-connect-mcp/blob/main/docs/INSTALL.md

Or with Homebrew: brew install idoo/tap/asc-mcp, then follow docs/INSTALL.md.

Compared

| | this one | forgeops | zelentsov | Joshua (archived) | asc | |---|:-:|:-:|:-:|:-:|:-:| | MCP | + | + | + | + | − | | Read-only default | + | − | − | − | − | | Asks before publishing | + | − | ~ | − | ~ | | Injection guard | + | − | − | − | − | | Release preflight | + | − | ~ | − | + | | Sales reports | + | − | + | + | + | | One binary, any OS | + | + | − | − | + |

~ partial

Security

It can't break anything until you let it. Anything public, money-moving or hard to undo for your users and team waits for your yes. Build uploads and Xcode Cloud runs don't ask. A 1-star review that says "ignore previous instructions" is still just a 1-star review. More in docs/SAFETY.md.

What it does

Everything you'd click in App Store Connect: releases, TestFlight, listings, screenshots, reviews, sales, IAPs, signing, Xcode Cloud. For everything else there's raw API access. Tool list, config.

License

MIT © Ivan Verevkin

Frequently asked questions

What is App Store Connect MCP?

MCP server for App Store Connect: releases, TestFlight, reviews, reports. Read-only by default.

How do I install App Store Connect MCP?

Follow the installation steps in its documentation, shown on this page and in its repository.

Does App Store Connect MCP need an API key?

Yes. It expects ASC_KEY_ID, ASC_PRIVATE_KEY, which you set in its configuration.

Is App Store Connect MCP open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains App Store Connect MCP?

It is published by idoo. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.