asc-mcp

MCPattested
v2.0.3SardorbekRMITUpdated 5d agonpmGitHub

MCP server for Apple's App Store Connect API - manage iOS, macOS, tvOS, and visionOS apps with AI

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
899Downloads/wk
22GitHub stars
5Forks
5d agoLast update
Package
AuthorSardorbekR
LicenseMIT
Version2.0.3
Sourcenpm+mcp-registry
npmasc-mcp
GitHubSardorbekR/appstore-connect-mcp
SBOMCycloneDX 1.6 ↓
Trust Status
A
85/100Trusted
✓Listed in Forge index+10/10
✓Identity verified · attested build+20/20
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—npm maintainer match+0/5
→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain—
Provenance✓ Sigstore-verified · d738483
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface40 tools · 5 privileged
Security scan✓ Cleanv2.0.4 · todayHow well does this scan work?
EvalsNone
IndexedOct 17, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 5 privileged
Statically extracted from the published packagev2.0.4 · 16h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

create_analytics_report_requestCreate a new analytics report request for an app. Use ONGOING for continuous reports or ONE_TIME_SNAPSHOT for a single snapshot. Reports take time to generate after creation.

Create a new analytics report request for an app. Use ONGOING for continuous reports or ONE_TIME_SNAPSHOT for a single snapshot. Reports take time to generate after creation.

No input schema was published for this tool.

list_analytics_report_requestsList all analytics report requests for an app. Shows whether each request is active or stopped due to inactivity.

List all analytics report requests for an app. Shows whether each request is active or stopped due to inactivity.

No input schema was published for this tool.

get_analytics_report_requestGet details of a specific analytics report request.

Get details of a specific analytics report request.

No input schema was published for this tool.

delete_analytics_report_requestprivilegedDelete an analytics report request. This stops report generation and removes access to existing reports.

Delete an analytics report request. This stops report generation and removes access to existing reports.

No input schema was published for this tool.

list_analytics_reportsList analytics reports available for a report request. Can filter by category (APP_STORE_ENGAGEMENT, COMMERCE, APP_USAGE, FRAMEWORKS_USAGE, PERFORMANCE).

List analytics reports available for a report request. Can filter by category (APP_STORE_ENGAGEMENT, COMMERCE, APP_USAGE, FRAMEWORKS_USAGE, PERFORMANCE).

No input schema was published for this tool.

list_analytics_report_instancesList report instances (dated snapshots) for an analytics report. Each instance represents data for a specific processing date. Can filter by granularity (DAILY, WEEKLY, MONTHLY) and processing date.

List report instances (dated snapshots) for an analytics report. Each instance represents data for a specific processing date. Can filter by granularity (DAILY, WEEKLY, MONTHLY) and processing date.

No input schema was published for this tool.

list_analytics_report_segmentsList downloadable segments for a report instance. Each segment contains a URL for downloading the report data, along with its checksum and size.

List downloadable segments for a report instance. Each segment contains a URL for downloading the report data, along with its checksum and size.

No input schema was published for this tool.

download_analytics_report_segmentDownload and parse an analytics report segment from its pre-signed URL. The segment data is gzip-compressed TSV. Returns parsed headers and rows (as key-value objects). Use list_analytics_report_segments to get the download URL first.

Download and parse an analytics report segment from its pre-signed URL. The segment data is gzip-compressed TSV. Returns parsed headers and rows (as key-value objects). Use list_analytics_report_segments to get the download URL first.

No input schema was published for this tool.

asc_api_requestHTTP method (default GET)

HTTP method (default GET)

No input schema was published for this tool.

asc_api_searchSearch the App Store Connect API operation index by keywords (matches paths, operation IDs, resource types), e.g. 'phased release', 'customer reviews', 'offer codes'.

Search the App Store Connect API operation index by keywords (matches paths, operation IDs, resource types), e.g. 'phased release', 'customer reviews', 'offer codes'.

No input schema was published for this tool.

asc_api_describeDescribe one App Store Connect API operation: query parameters with allowed values, body attributes (types, enums, required), relationships, and a minimal body template.

Describe one App Store Connect API operation: query parameters with allowed values, body attributes (types, enums, required), relationships, and a minimal body template.

No input schema was published for this tool.

get_app_info_categoriesGet the primary and secondary App Store categories and subcategories of an app info record. Unset slots are null.

Get the primary and secondary App Store categories and subcategories of an app info record. Unset slots are null.

No input schema was published for this tool.

set_app_categoriesSet or clear App Store categories and subcategories on an app info record. Only the slots provided are changed (at least one); pass null to clear a slot, e.g. remove the secondary category.

Set or clear App Store categories and subcategories on an app info record. Only the slots provided are changed (at least one); pass null to clear a slot, e.g. remove the secondary category.

No input schema was published for this tool.

list_app_subcategoriesList the subcategories of an App Store category, for example the subcategories of GAMES.

List the subcategories of an App Store category, for example the subcategories of GAMES.

No input schema was published for this tool.

get_age_rating_declarationGet the age rating questionnaire answers for an app info record.

Get the age rating questionnaire answers for an app info record.

No input schema was published for this tool.

update_age_rating_declarationUpdate age rating questionnaire answers. Only the attributes provided are changed; socialMedia cannot be true while userGeneratedContent is false.

Update age rating questionnaire answers. Only the attributes provided are changed; socialMedia cannot be true while userGeneratedContent is false.

No input schema was published for this tool.

create_app_info_localizationCreate an app info localization (name, subtitle, privacy links) for a locale. The name is required.

Create an app info localization (name, subtitle, privacy links) for a locale. The name is required.

No input schema was published for this tool.

delete_app_info_localizationprivilegedDelete an app info localization.

Delete an app info localization.

No input schema was published for this tool.

get_eulaGet the custom end user license agreement for an app. Returns null when the app has none.

Get the custom end user license agreement for an app. Returns null when the app has none.

No input schema was published for this tool.

create_eulaCreate a custom end user license agreement for an app, applied to the given territories (e.g. USA, GBR).

Create a custom end user license agreement for an app, applied to the given territories (e.g. USA, GBR).

No input schema was published for this tool.

update_eulaUpdate an app's custom EULA text and/or territories. Only the fields provided are changed; territories replaces the current list.

Update an app's custom EULA text and/or territories. Only the fields provided are changed; territories replaces the current list.

No input schema was published for this tool.

delete_eulaprivilegedDelete an app's custom end user license agreement.

Delete an app's custom end user license agreement.

No input schema was published for this tool.

list_app_infosList app info records for an app. Use this to get the appInfoId needed for localization operations.

List app info records for an app. Use this to get the appInfoId needed for localization operations.

No input schema was published for this tool.

list_app_info_localizationsList all localizations for an app info. Returns app name, subtitle, and privacy policy info for each locale.

List all localizations for an app info. Returns app name, subtitle, and privacy policy info for each locale.

No input schema was published for this tool.

update_app_info_localizationUpdate an app info localization. Use this to change app name, subtitle, or privacy policy URL for a locale.

Update an app info localization. Use this to change app name, subtitle, or privacy policy URL for a locale.

No input schema was published for this tool.

list_appsList all apps in your App Store Connect account. Returns app IDs, names, bundle IDs, and SKUs.

List all apps in your App Store Connect account. Returns app IDs, names, bundle IDs, and SKUs.

No input schema was published for this tool.

get_appGet detailed information about a specific app by its ID.

Get detailed information about a specific app by its ID.

No input schema was published for this tool.

list_beta_groupsList all beta groups for an app. Returns group names, public link info, and settings.

List all beta groups for an app. Returns group names, public link info, and settings.

No input schema was published for this tool.

list_beta_testersList all beta testers in a specific beta group.

List all beta testers in a specific beta group.

No input schema was published for this tool.

add_beta_testerAdd a new beta tester to a beta group by email address.

Add a new beta tester to a beta group by email address.

No input schema was published for this tool.

remove_beta_testerprivilegedRemove a beta tester from a beta group.

Remove a beta tester from a beta group.

No input schema was published for this tool.

list_buildsList all builds for an app.

List all builds for an app.

No input schema was published for this tool.

get_buildGet details of a specific build.

Get details of a specific build.

No input schema was published for this tool.

list_bundle_idsList all bundle IDs registered in App Store Connect. Can filter by platform.

List all bundle IDs registered in App Store Connect. Can filter by platform.

No input schema was published for this tool.

get_bundle_idGet details of a specific bundle ID.

Get details of a specific bundle ID.

No input schema was published for this tool.

create_bundle_idRegister a new bundle ID in App Store Connect. The identifier must be unique and follow reverse-domain notation (e.g., com.example.app).

Register a new bundle ID in App Store Connect. The identifier must be unique and follow reverse-domain notation (e.g., com.example.app).

No input schema was published for this tool.

update_bundle_idUpdate a bundle ID's name. Note: The identifier cannot be changed.

Update a bundle ID's name. Note: The identifier cannot be changed.

No input schema was published for this tool.

delete_bundle_idprivilegedDelete a bundle ID. Note: This cannot be undone and may affect apps using this bundle ID.

Delete a bundle ID. Note: This cannot be undone and may affect apps using this bundle ID.

No input schema was published for this tool.

list_app_categoriesList all app categories available in the App Store. Can filter by platform.

List all app categories available in the App Store. Can filter by platform.

No input schema was published for this tool.

get_app_price_scheduleGet the price schedule for an app, including pricing information.

Get the price schedule for an app, including pricing information.

No input schema was published for this tool.

40 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

MCP server for Apple's App Store Connect API - manage iOS, macOS, tvOS, and visionOS apps with AI

Keywords
mcpmodel-context-protocolapp-store-connectappleiosmacostvosvisionostestflightaillm
Alternatives
Comparing tool surfaces…

Tools exposed

40 tools · 5 privileged · observed by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-21 — observed resolution, not a publisher declaration.

60 packages resolved · 3 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

56 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+44 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.