A Model Context Protocol (MCP) server for Apple's App Store Connect API. Manage your iOS, macOS, tvOS, and visionOS apps directly from Claude, Cursor, or any MCP-compatible client.
MCP server for Apple's App Store Connect API - manage iOS, macOS, tvOS, and visionOS apps with AI
2026-11-13
スター
—
ツール
—
稼働率
—
Features
Any API Operation - Call any of the 1,303 App Store Connect API operations through asc_api_request, validated against Apple's OpenAPI spec, with asc_api_search and asc_api_describe to find and inspect them
Submission & Release - Edit version metadata (copyright, version string, release type), attach builds, App Review details, review submissions, phased and manual release, export compliance
App Info - Categories, age rating declaration, app info localizations, custom EULA
App Store Localizations - Full CRUD for version descriptions, keywords, and what's new
App Management - List and inspect apps across all platforms
Version Control - Create and manage app store versions
TestFlight - Groups, build access, testers and invitations, What to Test notes, beta app localizations, beta review submissions
Screenshots & Previews - Upload, reorder, and delete screenshots and app previews; review screenshots for subscriptions and in-app purchases
Customer Reviews - Read reviews and publish or remove responses
Bundle ID Management - Full CRUD for bundle identifiers
Device Management - List and inspect registered devices
User Management - List and inspect team users
Build Management - List and inspect app builds
Category & Pricing - Browse categories, check pricing and availability
Pricing & PPP - Set per-territory pricing with Purchase Power Parity support
Get an App Store Connect API key (see Prerequisites).
Add the server to your MCP client with npx -y asc-mcp@latest and your credentials (see MCP Client Configuration).
Restart the client. New releases are picked up on each restart.
Installation
npx (recommended)
npx -y asc-mcp@latest
Your MCP client runs this command itself (see MCP Client Configuration). npx fetches the newest release whenever the client starts, so you stay up to date.
Global install
npm install -g asc-mcp
Then use "command": "asc-mcp" in your client config. A global install does not update by itself: run npm install -g asc-mcp@latest to update.
Updating
npx: restart your MCP client. A running client keeps the version it started with.
Global install:npm install -g asc-mcp@latest, then restart the client.
Pin a version for stability with [email protected] (or any version) instead of asc-mcp@latest.
Once a day the server asks npm for the latest version in the background, without delaying startup. If yours is older, the next time the server starts it tells your assistant, which mentions it to you once. It sends nothing but that request, and installs nothing. Set ASC_DISABLE_UPDATE_CHECK=1 to turn it off.
From Source
git clone https://github.com/SardorbekR/appstore-connect-mcp.git
cd appstore-connect-mcp
npm install
npm run build
Go to Users and Access → Integrations → App Store Connect API
Click Generate API Key (or use existing)
Select appropriate role (Admin or App Manager recommended)
Download the .p8 file - you can only download it once!
Note your Key ID (shown in the keys list)
Note your Issuer ID (shown at the top of the page)
Environment Variables
Variable
Required
Description
APP_STORE_CONNECT_KEY_ID
Yes
Your API Key ID (e.g., ABC123DEFG)
APP_STORE_CONNECT_ISSUER_ID
Yes
Your Issuer ID (UUID format)
APP_STORE_CONNECT_P8_PATH
Yes*
Path to your .p8 private key file
APP_STORE_CONNECT_P8_CONTENT
Yes*
Raw content of .p8 key (alternative to path)
*One of P8_PATH or P8_CONTENT is required.
Optional settings:
Variable
Default
Description
ASC_TOOLSETS
all
Comma-separated tool groups to expose: apps, versions, media, testflight, pricing, subscriptions, iap, reviews, product-pages, provisioning, users, analytics, api. Fewer tools means less context in clients with small tool budgets. The api group reaches every operation, including ones outside the other groups.
ASC_READ_ONLY
off
1 exposes only read tools and makes the client refuse every non-GET request
ASC_MAX_RESPONSE_CHARS
80000
Size cap for asc_api_request results; larger results end at a page boundary with a cursor to continue
ASC_DISABLE_UPDATE_CHECK
off
1 skips the once-a-day check for a newer asc-mcp release
Set per-territory manual pricing (replaces entire schedule)
appId, baseTerritory, manualPrices
In-App Purchases (Lifetime / Non-Consumable)
One-time purchases via Apple's In-App Purchases v2 API. create_in_app_purchase defaults to NON_CONSUMABLE — a "lifetime" unlock. To ship one: create → add a localization → set a price → set availability → submit for review.
Note: App Review usually requires a review screenshot on the in-app purchase. Uploading IAP review screenshots is not yet covered by these tools — add one in App Store Connect if submit_in_app_purchase_for_review is rejected for a missing screenshot.
Tool
Description
Parameters
list_in_app_purchases
List an app's in-app purchases, optionally by type
appId, inAppPurchaseType?, limit?
get_in_app_purchase
Get a single in-app purchase's details and state
inAppPurchaseId
create_in_app_purchase
Create an IAP (defaults to NON_CONSUMABLE / lifetime)
Search the App Store Connect API operation index by keywords (matches paths, operation IDs, resource types), e.g. 'phased release', 'customer reviews', 'offer codes'.
query, method?, limit?
asc_api_describe
Describe one App Store Connect API operation: query parameters with allowed values, body attributes (types, enums, required), relationships, and a minimal body template.
method, path
Subscriptions
Tool
Description
Parameters
list_subscription_groups
List all subscription groups for an app.
appId, limit?
get_subscription_group
Get details of a specific subscription group by its ID.
subscriptionGroupId
create_subscription_group
Create a new subscription group for an app.
appId, referenceName
update_subscription_group
Update the reference name of a subscription group.
subscriptionGroupId, referenceName
list_subscription_group_localizations
List the localizations for a subscription group.
subscriptionGroupId, limit?
get_subscription_group_localization
Get a single subscription group localization by its ID.
List all localizations (translated names and descriptions) for a subscription.
subscriptionId, limit?
create_subscription_localization
Create a localized name and description for a subscription in a specific locale.
subscriptionId, name, locale, description?
update_subscription_localization
Update the localized name or description for a subscription localization.
localizationId, name?, description?
delete_subscription_localization
Delete a localization for a subscription.
localizationId
list_subscription_price_points
List available price points for a subscription, showing customer price and developer proceeds.
subscriptionId, territory?, limit?, offset?
list_subscription_prices
List the current prices set for a subscription, including price tier and territory details.
subscriptionId, territory?, limit?
get_subscription_availability
Get the territory availability configuration for a subscription — shows which territories it is available in and whether it is automatically available in new territories.
subscriptionId
set_subscription_availability
Set the territory availability for a subscription.
Create a screenshot set for one device display size in an App Store version localization.
localizationId, screenshotDisplayType
delete_screenshot_set
Delete a screenshot set and every screenshot in it.
screenshotSetId
delete_screenshot
Delete one screenshot from its screenshot set.
screenshotId
reorder_screenshots
Set the display order of the screenshots in a set. screenshotIds must list every current screenshot in the set exactly once, in the new order; get the IDs with list_screenshots.
screenshotSetId, screenshotIds
list_preview_sets
List the app preview sets (one per device type) in an App Store version localization.
localizationId, limit?
create_preview_set
Create an app preview set for one device type in an App Store version localization.
localizationId, previewType
delete_preview_set
Delete an app preview set and every app preview in it.
previewSetId
list_previews
List the app previews (videos) in an app preview set.
previewSetId, limit?
upload_app_preview
Upload a .mov, .m4v, or .mp4 video as an app preview.
Set the display order of the app previews in a preview set. previewIds must list every current preview in the set exactly once, in the new order; get the IDs with list_previews.
previewSetId, previewIds
upload_subscription_review_screenshot
Upload the App Review screenshot for a subscription from a local file.
subscriptionId, filePath, fileName?
upload_iap_review_screenshot
Upload the App Review screenshot for an in-app purchase from a local file.
inAppPurchaseId, filePath, fileName?
TestFlight Groups
Tool
Description
Parameters
get_beta_group
Get a beta group's settings, including its public TestFlight link.
List the one-time-use code batches generated for an offer code, with counts and expiry dates.
offerCodeId, limit?
get_iap_one_time_code_values
Get the redemption code values of a one-time-use batch as CSV, inline or (for large batches) to a new file via savePath, with the number of non-empty lines.
oneTimeUseCodeBatchId, savePath?
create_iap_custom_code
Create a custom redemption code for an offer code.
List the custom redemption codes for an offer code, with redemption counts and expiry dates.
offerCodeId, limit?
Custom Product Pages
Tool
Description
Parameters
list_custom_product_pages
List the custom product pages of an app, optionally filtered by visibility.
appId, visible?, limit?
get_custom_product_page
Get one custom product page by ID.
customProductPageId
create_custom_product_page
Create a custom product page for an app, with its first version and one localization (the app's primary locale unless locale is given).
appId, name, locale?, promotionalText?, deepLink?
update_custom_product_page
Update a custom product page's name or visibility.
customProductPageId, name?, visible?
delete_custom_product_page
Delete a custom product page by ID.
customProductPageId
list_cpp_versions
List the versions of a custom product page, optionally filtered by review state.
customProductPageId, states?, limit?
create_cpp_version
Create a new version of a custom product page, optionally with a deep link.
customProductPageId, deepLink?
list_cpp_localizations
List the per-locale localizations of a custom product page version, optionally filtered by locale.
versionId, locales?, limit?
create_cpp_localization
Add a locale with promotional text to a custom product page version.
versionId, locale, promotionalText?
update_cpp_localization
Set the promotional text of a custom product page localization.
localizationId, promotionalText
delete_cpp_localization
Delete a custom product page localization by ID.
localizationId
Usage Examples
List Your Apps
"Show me all my apps in App Store Connect"
Claude will use list_apps to retrieve and display your apps.
Update App Description
"Update the English description for version 2.0 of MyApp to: 'A revolutionary app that simplifies your daily tasks.'"
Claude will:
Find the app using list_apps
Get the version using list_app_versions
Find the English localization using list_version_localizations
Update it using update_version_localization
Add Japanese Localization
"Add Japanese localization to MyApp version 2.0 with description '素晴らしいアプリです' and keywords 'アプリ,便利,簡単'"
Claude will use create_version_localization with locale ja.
Add a Beta Tester
"Add [email protected] as a beta tester to the Internal Testing group for MyApp"
Claude will:
Find the app and beta group using list_beta_groups
Add the tester using add_beta_tester
Set PPP Pricing
"Show me the equivalent prices for my $9.99 tier in India, Brazil, and Turkey"
Claude will:
Find the $9.99 price point using list_app_price_points
Get equivalent prices using get_price_point_equalizations
Show you the PPP-adjusted prices in each territory
"Set my app to $9.99 in the US and use PPP pricing for India and Brazil"
Claude will use set_app_prices with the appropriate price point IDs for each territory.
Create a Lifetime Purchase
"Add a $99.99 lifetime unlock to MyApp with PPP pricing for India and Brazil"
Claude will:
Create a non-consumable IAP with create_in_app_purchase
Add a display name with create_in_app_purchase_localization
Find the $99.99 tier with list_in_app_purchase_price_points, then PPP equivalents with get_in_app_purchase_price_point_equalizations
Apply per-territory pricing with set_in_app_purchase_price and open availability with set_in_app_purchase_availability
Confirm the result with list_in_app_purchase_prices
Check Version Status
"What's the status of all versions of MyApp?"
Claude will use list_app_versions to show version states (PREPARE_FOR_SUBMISSION, IN_REVIEW, READY_FOR_SALE, etc.)
Prepare and Submit a Version
"Set the copyright of MyApp 2.1 to '2026 Example Inc.', attach build 42, add review notes, and submit it for review"
Claude will use update_app_version, set_app_version_build (only VALID builds attach), update_review_detail, then create_review_submission, add_review_submission_item, and submit_review_submission, which refuses if the submission holds anything besides the items you expect.
Anything Without a Dedicated Tool
"Turn on Game Center for MyApp's next version"
Claude will use asc_api_search to find the operation, asc_api_describe to see its body, and asc_api_request to call it.
Security
Credential Handling
Private keys are never logged or exposed in error messages
JWT tokens are automatically redacted from any error output
Issuer ID is redacted from error messages and details; demo account passwords are never returned and are redacted from errors
Read-only mode (ASC_READ_ONLY=1) blocks writes in the HTTP client itself, not just in the tool list
Generic requests only reach relative /v1-/v3 paths on the App Store Connect host, with .., encoded, and absolute paths rejected; they must match Apple's spec unless allowUnknown is set. Demo account passwords and webhook secrets are masked in responses
Offer code CSVs are written only to new files (savePath, owner-only permissions), never over existing ones
P8 file paths are validated against directory traversal attacks (.. not allowed)
Only absolute paths are resolved
Best Practices
Never commit credentials - Use environment variables or a secrets manager
Restrict API key permissions - Use minimal required role (App Manager for most operations)
Rotate keys periodically - Generate new API keys and revoke old ones
Secure your .p8 file - Set file permissions to 600 (owner read/write only)
chmod 600 /path/to/AuthKey.p8
Troubleshooting
"Configuration error: APP_STORE_CONNECT_KEY_ID environment variable is required"
Ensure all required environment variables are set:
APP_STORE_CONNECT_KEY_ID
APP_STORE_CONNECT_ISSUER_ID
APP_STORE_CONNECT_P8_PATH or APP_STORE_CONNECT_P8_CONTENT
"Failed to read private key"
Verify the path in APP_STORE_CONNECT_P8_PATH is correct and absolute
Check file permissions: ls -la /path/to/AuthKey.p8
Ensure the file is a valid .p8 from Apple (starts with -----BEGIN PRIVATE KEY-----)
"Authentication failed"
This usually means:
The API key was revoked in App Store Connect
The Key ID or Issuer ID doesn't match the .p8 file
The .p8 file is corrupted or incomplete
"Rate limit exceeded"
The server includes built-in rate limiting (50 requests/minute). If you hit Apple's limits:
Wait for the indicated retry time
Batch your operations when possible
The server automatically retries with exponential backoff
Tools Not Appearing in Claude
Verify the server is running: check Claude Desktop logs
Ensure the config file path is correct for your OS
Restart Claude Desktop after config changes
Development
Prerequisites
Node.js 20+
npm or pnpm
Setup
# Clone the repository
git clone https://github.com/SardorbekR/appstore-connect-mcp.git
cd appstore-connect-mcp
# Install dependencies
npm install
# Build
npm run build
# Run tests
npm test
# Lint
npm run lint
# Type check
npm run typecheck
spec/openapi.oas.json is Apple's App Store Connect OpenAPI spec, pinned (see spec/README.md). Tests check every request a tool sends against it.
npm run check-openapi # fail if src/openapi/schema-index.json is stale
npm run update-openapi # download Apple's latest spec and regenerate the index
npx tsx scripts/spec-sheet.ts "PATCH /v1/appInfos/{id}" # print an operation's resolved shape
Running Locally
# Development mode with auto-reload
npm run dev
# Or run the built version
npm start
Releasing
Releases publish from GitHub Actions (.github/workflows/publish.yml) when a version tag is pushed. npm uses trusted publishing (OIDC, no token, provenance attached) and the MCP Registry uses GitHub OIDC.
Set the new version in package.json and package-lock.json (npm version X.Y.Z --no-git-tag-version), both fields in server.json, and SERVER_VERSION in src/index.ts
Merge to main
git tag vX.Y.Z && git push origin vX.Y.Z
Approve the run: the publish job waits on the release environment until a required reviewer opens the workflow run and clicks Review deployments → Approve
The workflow refuses to publish if any version field differs from the tag, or if typecheck, lint, tests, or the OpenAPI index check fail.
Contributing
Fork the repository
Create a feature branch: git checkout -b feature/my-feature
Make your changes and add tests
Run npm test and npm run lint
Submit a pull request
Acknowledgements
The generic API tools, the OpenAPI index format, and several workflow details (review submissions, asset uploads, offer pricing) follow rorkai/App-Store-Connect-CLI (MIT).
