# storelift-mcp App Store & Google Play keyword ranks, rivals, reviews, charts and AI visibility as an MCP server - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.1.2 - **Author:** net.storelift - **License:** MIT - **npm:** storelift-mcp - **Endpoints:** streamable-http https://storelift.net/mcp - **Source:** https://github.com/vom-core/storelift-mcp - **Endpoint health:** reachable (last checked 2026-09-14T12:47:46.091Z, 1 sample) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-13T14:23:08.107Z - **Version scanned:** 1.1.0 - **CVEs:** none found by OSV at scan time **Findings** - injection-shaped content (note) in the `get_ai_visibility` tool: Imperative addressed to the AI model ## Tools 8 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `list_apps` — List the apps tracked in this Storelift account (id, name, countries, keywords). Call this first — every other tool needs an appId from here. - `get_keywords` — Keyword ranks for one app in one App Store / Google Play country. THREE STATES ARE DISTINCT: measured=false means the query could not be measured, rank=null mea - `get_rivals` — Apps that rank ABOVE this app in search. For each rival you get the keywords it beats you on, its rank there (theirRank) and yours (ourRank) — ourRank null mean - `get_ai_visibility` — Whether AI assistants name this app when asked natural questions about its category — reported per engine (Claude / ChatGPT / Gemini), never averaged. This is a - `get_history` — Keyword rank history for one country. Series points are [day, rank]; a null rank means the app was absent from the top results that day, which is not the same a - `get_store_page` — The app's own store listing signals for one country: name, subtitle, version, in-app events, editorial placements, similar-apps shelves and the screenshot set ( - `get_reviews` — Recent reviews for one country: `list` is the App Store feed, `android` the Google Play page (a narrower window, and Play publishes no review title or version). - `get_charts` — App Store chart position for one country: current ranks per list (free / paid / grossing, overall and in category) plus their history. Google Play is absent on ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"storelift\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"storelift-mcp\"\n ],\n \"env\": {\n \"STORELIFT_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `STORELIFT_API_KEY` — Storelift API Key (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — runs locally and hosted; holds an api key. - Floor 25, ceiling 25 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/storelift-mcp - Install plan: https://forgeregistry.com/api/v1/packages/storelift-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/storelift-mcp - HTML page: https://forgeregistry.com/registry/storelift-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.