App Store Connect MCP服务器

asc-mcp

An MCP (Model Context Protocol) server for Apple App Store Connect.

Features

356 MCP tools covering the major capability areas of the App Store Connect API (tracking API version 4.4.1), including the three-step asset upload flow for screenshots, previews, and review attachments:

• App Management: List apps, get app details, view app versions
• Build Management: List and inspect builds, view processing status
• App Store Versions: Create, update, delete versions; submit for review
• TestFlight: Manage beta groups and testers, beta localizations, build beta details
• Provisioning: Manage bundle IDs, certificates, profiles, and devices
• In-App Purchases: Full CRUD for in-app purchases
• Subscriptions: Manage subscription groups, subscriptions, offer codes, win-back offers
• Pricing & Availability: Configure app pricing, territories, and availability
• Age Ratings: Manage age rating declarations, including per-territory ratings
• Localizations: App info and version localizations
• Customer Reviews: Read and respond to customer reviews
• App Events: Create and manage in-app events
• App Clips: Manage default and advanced App Clip experiences
• Screenshots & Previews: Manage screenshot sets and app previews
• Game Center: Achievements, leaderboards, leaderboard sets, activities, challenges, and server-side player submissions
• Xcode Cloud: CI products, workflows, and build runs
• Analytics: Analytics report requests and data
• Users & Roles: Team member management and invitations
• Sandbox Testing: Manage sandbox tester accounts
• Custom Product Pages: A/B testing with custom product pages and experiments
• Diagnostics: Performance metrics, diagnostic signatures, and logs
• Encryption: Export compliance declarations
• EULA & Categories: License agreements and app categories
• Alternative Distribution: EU alternative distribution keys and marketplace search

Prerequisites

• Go 1.26.7 or later (older toolchains fetch it automatically)
• App Store Connect API credentials

Getting App Store Connect API Credentials

1. Go to App Store Connect
2. Navigate to Users and Access > Integrations > App Store Connect API
3. Click + to generate a new key
4. Select the appropriate role:
   • Admin: Full access to all features
   • Developer: Access to app metadata, builds, and TestFlight
   • App Manager: Limited access to specific apps
5. Download the .p8 private key file (this can only be downloaded once)
6. Note the Key ID and Issuer ID displayed on the page

Configuration

Set the following environment variables:

export ASC_ISSUER_ID="xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
export ASC_KEY_ID="XXXXXXXXXX"
export ASC_PRIVATE_KEY_PATH="/path/to/AuthKey_XXXXXXXXXX.p8"

See config/config.sample.env for a template.

SETUP.md walks through installation and client configuration for Claude Desktop, Claude Code, and Codex, including the HTTP transport.

Building

make build

The binary will be placed in bin/asc-mcp.

Usage with Claude

Claude Desktop Configuration

Add the following to your Claude Desktop configuration file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "asc-mcp": {
      "command": "/path/to/asc-mcp",
      "env": {
        "ASC_ISSUER_ID": "your-issuer-id",
        "ASC_KEY_ID": "your-key-id",
        "ASC_PRIVATE_KEY_PATH": "/path/to/AuthKey.p8"
      }
    }
  }
}

Claude Code Configuration

Add to your project's .mcp.json:

{
  "mcpServers": {
    "asc-mcp": {
      "command": "/path/to/asc-mcp",
      "env": {
        "ASC_ISSUER_ID": "your-issuer-id",
        "ASC_KEY_ID": "your-key-id",
        "ASC_PRIVATE_KEY_PATH": "/path/to/AuthKey.p8"
      }
    }
  }
}

Available Tools

App Management (3 tools)

Build Management (2 tools)

App Store Versions (9 tools)

TestFlight (7 tools)

Beta Review & Localizations (17 tools)

Provisioning (6 tools)

In-App Purchases (5 tools)

Subscriptions (4 tools)

Commerce Versioning (29 tools)

In-app purchases, subscriptions and subscription groups are versioned (App Store Connect API 4.4.1). Create a version, edit its localizations and images, then attach the version to a review submission with add_review_submission_item.

In-App Purchase Offer Codes (12 tools)

Commerce Pricing & Availability (18 tools)

Promoted Purchases & Offers (14 tools)

Pricing & Availability (7 tools)

Age Ratings (3 tools)

App Info Localizations (6 tools)

Version Localizations (5 tools)

Customer Reviews (4 tools)

App Events (5 tools)

Phased Release (4 tools)

Pre-Orders (1 tool)

Apple removed the appPreOrders resource; ending a pre-order is now an availability operation.

App Clips (6 tools)

Screenshots & Previews (8 tools)

Custom Product Pages & Experiments (10 tools)

Game Center (11 tools)

Game Center Leaderboard Sets (20 tools)

Game Center Activities (14 tools)

Game Center Challenges (13 tools)

Game Center Player Submissions (2 tools)

Game Center content reaches App Review through add_review_submission_item: attach the achievement, leaderboard, leaderboard set, activity, or challenge version to a draft review submission.

Xcode Cloud (7 tools)

Analytics (7 tools)

Diagnostics & Metrics (10 tools)

Users & Roles (8 tools)

Sandbox Testers (3 tools)

Sandbox testers are created and deleted in App Store Connect; the API exposes only reads, updates, and purchase-history resets.

Encryption Declarations (4 tools)

Reports (2 tools)

EULA (4 tools)

App Categories (2 tools)

Alternative Distribution (4 tools)

Marketplace Search (4 tools)

Review Submissions (6 tools)

App Store versions, custom product pages, experiments, app events, Game Center content, and commerce versions all reach App Review through this flow.

Webhooks (8 tools)

Build Uploads (6 tools)

TestFlight Beta Feedback (8 tools)

Background Assets (10 tools)

Accessibility Declarations (5 tools)

App Tags (3 tools)

Android to iOS App Mapping (5 tools)

Asset Uploads (3 tools)

Other (2 tools)

Development

Running Tests

make test

Code Formatting

make fmt

Linting

make lint

Architecture

The MCP protocol layer, JWT/ES256 signing, and HTTP client are implemented using only the Go standard library. The CLI is built on spf13/cobra (see ADR-0004). No other runtime dependencies are required.

The server is dual-era: it speaks the stateless MCP protocol revision 2026-07-28 (per-request _meta version/capabilities, server/discover, no sessions) and still serves handshake-based clients, negotiating 2025-11-25, 2025-06-18, 2025-03-26, or 2024-11-05 via initialize. Each request picks its era: a _meta io.modelcontextprotocol/protocolVersion key (or a server/discover call) selects the modern path; everything else takes the legacy path unchanged.

Two transports are supported, sharing the same dispatcher and tool registry:

• asc-mcp serve — stdio. JSON-RPC messages on stdin/stdout. Use this when the server is spawned by a desktop client such as Claude Desktop.
• asc-mcp serve-http --addr :8080 — Streamable HTTP. POST /mcp for JSON-RPC submissions, GET /healthz for the K8s probe, GET /metrics for Prometheus scraping. Modern (2026-07-28) requests are sessionless and must carry the Mcp-Method header (plus Mcp-Name on tools/call); legacy clients get an Mcp-Session-Id on initialize, echo it on every subsequent request, and may DELETE /mcp to end the session. Useful flags:
  • --auth-tokens (or ASC_MCP_AUTH_TOKENS env): comma-separated Bearer tokens. Required for any non-trusted-network deployment.
  • --allowed-origins: comma-separated Origin allowlist (DNS rebinding defense for browser clients).
  • --tls-cert / --tls-key: PEM cert+key to terminate TLS in process (TLS 1.2 minimum). Omit both to listen plain HTTP behind a TLS-terminating reverse proxy.
  • --log-format (json|text), --log-level (debug|info|warn|error).

Asset uploads (screenshots, previews, review attachments) use the three-step App Store Connect handshake (reserve → chunked upload → commit) under the hood. Tools accept either a local file_path or a base64-encoded file_data_base64 so they work both from stdio and over the HTTP transport.

asc-mcp/
├── cmd/asc-mcp/          # Application entry point
├── internal/asc/
│   ├── api/              # App Store Connect API client
│   ├── config/           # Configuration management
│   ├── server/           # MCP server implementation
│   └── tools/            # Tool implementations
├── config/               # Configuration templates
├── script/               # Build and test scripts
└── doc/                  # Documentation

License

MIT License