io.github.beautyfree/app-store-connect
NPM · MCP-ASC
App Store Connect API as MCP: apps, TestFlight, subscriptions, localizations, reports. JWT auth.
Available components
Last scanned (23 hours ago)
Scores higher than 87% of npm servers
Category CI/CD and DevOps
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security99
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 35 of 194 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 193 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability81
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 5947 tokens (~87/item across 68 items; 68 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 93% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 68 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 30 Oct 26 0
- Stability: 0.97 → pass security
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 −1
- Stability: pass → 0.93 functional
- 22 Oct 26 0
- Stability: 0.97 → pass security
- 21 Oct 26 0
- Stability: pass → 0.97 functional
- 17 Oct 26 +3
- Stability: 0.80 → pass security
- 16 Oct 26 −3
- Stability: pass → 0.80 functional
- 15 Oct 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed npm/mcp-asc@2.0.4
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 194 packages
| Packages resolved | 194 |
|---|---|
| Stale | 35 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
list-nominations List nominations ~85
List App Store nominations (e.g. custom product pages, in-app events)
| Name | Type | Req | Description |
|---|---|---|---|
| filter[relatedApps] | – | – | Filter by related app ID(s) |
| filter[state] | – | yes | Filter by nomination state(s) (required) |
| filter[type] | – | – | Filter by nomination type(s) |
| limit | number | – | Maximum number of nominations to return (default 100, max 200) |
No output schema declared.
No examples provided.
list-pre-release-versions List pre-release versions ~97
List pre-release versions (TestFlight) for an app or across apps
| Name | Type | Req | Description |
|---|---|---|---|
| filter[app] | – | – | Filter by app ID(s) |
| filter[id] | – | – | Filter by pre-release version ID(s) |
| filter[platform] | – | – | Filter by platform(s) |
| filter[version] | – | – | Filter by version string(s) |
| limit | number | – | Maximum number of pre-release versions to return (default 100, max 200) |
No output schema declared.
No examples provided.
list-profiles List profiles ~88
Get a list of provisioning profiles in your team
| Name | Type | Req | Description |
|---|---|---|---|
| filter[id] | – | – | Filter by profile ID(s) |
| filter[name] | – | – | Filter by profile name(s) |
| filter[profileState] | – | – | Filter by profile state(s) |
| filter[profileType] | – | – | Filter by profile type(s) |
| limit | number | – | Maximum number of profiles to return (default 100, max 200) |
No output schema declared.
No examples provided.
list-review-submissions List review submissions ~126
List App Store review submissions for an app (submission history). Filter by state (e.g. UNRESOLVED_ISSUES for rejected). Note: the actual rejection message is only visible in App Store Connect → Version → Resolution Center, not in the API.
| Name | Type | Req | Description |
|---|---|---|---|
| filter[app] | – | yes | App ID(s) (required). Submission history for this app. |
| filter[platform] | – | – | Filter by platform(s) |
| filter[state] | – | – | Filter by submission state(s) |
| limit | number | – | Maximum number of review submissions to return (default 100, max 200) |
No output schema declared.
No examples provided.
list-schemes List Xcode schemes ~41
List all available schemes in an Xcode project or workspace
| Name | Type | Req | Description |
|---|---|---|---|
| projectPath | string | yes | Path to .xcodeproj or .xcworkspace file |
No output schema declared.
No examples provided.
list-subscription-group-subscriptions List subscription group subscriptions ~166
List all auto-renewable subscriptions in a subscription group (productId, name, state, prices, etc.). Use to verify products like premium_monthly_v2 and premium_annual_v2 in a group.
| Name | Type | Req | Description |
|---|---|---|---|
| filter[name] | – | – | Filter by subscription name(s) |
| filter[productId] | – | – | Filter by product ID(s), e.g. premium_monthly_v2 |
| filter[state] | – | – | Filter by state (e.g. APPROVED) |
| limit | number | – | Maximum number of subscriptions to return (default 50, max 200) |
| sort | string | – | Sort by name (use -name for descending) |
| subscriptionGroupId | string | yes | Subscription group ID (e.g. Premium group ID). Get from app → subscription groups. |
No output schema declared.
No examples provided.
list-subscription-groups List subscription groups ~91
List subscription groups for an app. Use the returned group IDs with list-subscription-group-subscriptions or create-subscription.
| Name | Type | Req | Description |
|---|---|---|---|
| appId | string | yes | App ID. List subscription groups for this app. |
| filter[referenceName] | – | – | Filter by reference name(s), e.g. Premium |
| limit | number | – | Maximum number of groups to return (default 50, max 200) |
No output schema declared.
No examples provided.
list-subscription-price-points List subscription price points ~109
List available price points for a subscription. Use the returned price point id as subscriptionPricePointId in create-subscription-price.
| Name | Type | Req | Description |
|---|---|---|---|
| filter[territory] | – | – | Filter by territory ID(s), e.g. USA. Omit to return price points for all territories. |
| limit | number | – | Maximum number of price points to return (default 50, max 200) |
| subscriptionId | string | yes | Subscription ID (from create-subscription or list-subscription-group-subscriptions) |
No output schema declared.
No examples provided.
list-territories List territories ~46
Get the list of territories (countries/regions) for App Store availability
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Maximum number of territories to return (default 100, max 200) |
No output schema declared.
No examples provided.
list-user-invitations List user invitations ~80
Get a list of pending user invitations to your team
| Name | Type | Req | Description |
|---|---|---|---|
| filter[email] | – | – | Filter by invite email(s) |
| filter[roles] | – | – | Filter by role(s) |
| filter[visibleApps] | – | – | Filter by visible app ID(s) |
| limit | number | – | Maximum number of user invitations to return (default 100, max 200) |
No output schema declared.
No examples provided.
list-users List users ~81
Get a list of team members (users) in your App Store Connect team
| Name | Type | Req | Description |
|---|---|---|---|
| filter[roles] | – | – | Filter by role(s) |
| filter[username] | – | – | Filter by username(s) |
| filter[visibleApps] | – | – | Filter by visible app ID(s) |
| limit | number | – | Maximum number of users to return (default 100, max 200) |
No output schema declared.
No examples provided.
remove-beta-testers-from-group Remove beta testers from group ~78
Remove one or more beta testers from a TestFlight group. Tester IDs come from list-beta-testers.
| Name | Type | Req | Description |
|---|---|---|---|
| betaGroupId | string | yes | Beta group ID to remove testers from (required) |
| betaTesterIds | – | yes | Beta tester ID(s) to remove (one or more; use list-beta-testers to get IDs) |
No output schema declared.
No examples provided.
submit-for-review Submit for review ~80
Submit an App Store version for review. Creates a review submission, adds the version as an item, and marks it as submitted.
| Name | Type | Req | Description |
|---|---|---|---|
| appId | string | yes | App ID (required) |
| appStoreVersionId | string | yes | App Store version ID to submit for review (required) |
| platform | string | – | Platform for the submission (optional) |
No output schema declared.
No examples provided.
update-age-rating-declaration Update age rating declaration ~227
Update age rating declaration for an app version (content ratings). Get ID from get-app-info or get-app-store-version include.
| Name | Type | Req | Description |
|---|---|---|---|
| advertising | boolean | – | – |
| ageRatingDeclarationId | string | yes | Age rating declaration ID (from get-app-info or app store version include) |
| ageRatingOverrideV2 | string | – | Override age rating (e.g. NINE_PLUS, THIRTEEN_PLUS) |
| alcoholTobaccoOrDrugUseOrReferences | string | – | – |
| developerAgeRatingInfoUrl | – | – | – |
| gambling | boolean | – | – |
| gamblingSimulated | string | – | – |
| horrorOrFearThemes | string | – | – |
| matureOrSuggestiveThemes | string | – | – |
| medicalOrTreatmentInformation | string | – | – |
| profanityOrCrudeHumor | string | – | – |
| sexualContentOrNudity | string | – | – |
| unrestrictedWebAccess | boolean | – | – |
| userGeneratedContent | boolean | – | – |
| violenceCartoonOrFantasy | string | – | – |
| violenceRealistic | string | – | – |
No output schema declared.
No examples provided.
update-app-store-review-detail Update app store review detail ~182
Update App Review details for a version: contact, demo account, notes. Required before submit for review if app needs login or special instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| appStoreReviewDetailId | string | yes | App Store review detail ID (from get-app-store-review-detail or get-app-store-version with include) |
| contactEmail | string | – | Contact email for App Review |
| contactFirstName | string | – | Contact first name for App Review |
| contactLastName | string | – | Contact last name for App Review |
| contactPhone | string | – | Contact phone for App Review |
| demoAccountName | string | – | Demo account username (if app requires login) |
| demoAccountPassword | string | – | Demo account password |
| demoAccountRequired | boolean | – | Whether a demo account is required |
| notes | string | – | Notes for the App Review team |
No output schema declared.
No examples provided.
update-app-store-version Update app store version ~126
Update an App Store version: assign a build, set version string, copyright, release type, or downloadable flag.
| Name | Type | Req | Description |
|---|---|---|---|
| appStoreVersionId | string | yes | App Store version ID to update (required) |
| buildId | string | – | Build ID to assign to this version (required for submit for review) |
| copyright | string | – | Copyright text |
| downloadable | boolean | – | Whether the version is downloadable |
| releaseType | string | – | How to release after approval |
| versionString | string | – | Version string (e.g. 1.2.0) |
No output schema declared.
No examples provided.
update-beta-license-agreement Update beta license agreement ~61
Update TestFlight (beta) license agreement text. Required for external testing.
| Name | Type | Req | Description |
|---|---|---|---|
| agreementText | string | yes | New TestFlight license agreement text |
| betaLicenseAgreementId | string | yes | Beta license agreement ID (from get-beta-license-agreement) |
No output schema declared.
No examples provided.
update-eula Update EULA ~87
Update app EULA text and/or territories. Get EULA ID from get-eula.
| Name | Type | Req | Description |
|---|---|---|---|
| agreementText | string | – | New EULA text (plain text or HTML) |
| eulaId | string | yes | EULA ID (from get-eula) |
| territoryIds | – | – | Territory IDs to apply this EULA to (from list-territories). Omit to keep current. |
No output schema declared.
No examples provided.
How do I install the io.github.beautyfree/app-store-connect MCP server?
io.github.beautyfree/app-store-connect runs locally as an npm package, launched with npx -y mcp-asc. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mcp-asc
claude mcp add beautyfree-app-store-connect -- npx -y mcp-asc
What is the io.github.beautyfree/app-store-connect MCP server?
io.github.beautyfree/app-store-connect is an MCP server listed in the public MCP registry as io.github.beautyfree/app-store-connect. App Store Connect API as MCP: apps, TestFlight, subscriptions, localizations, reports. JWT auth. This page covers its npm package (mcp-asc).
Is the io.github.beautyfree/app-store-connect MCP server safe to use?
io.github.beautyfree/app-store-connect scores 85 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 4 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.beautyfree/app-store-connect MCP server expose?
io.github.beautyfree/app-store-connect exposes 68 tools: add-beta-testers-to-group, create-app-store-version, create-customer-review-response, create-phased-release, create-subscription-availability, and 63 more. Their descriptions and schemas cost roughly 5,947 tokens of context every time the server is loaded.
Is the io.github.beautyfree/app-store-connect MCP server still maintained?
io.github.beautyfree/app-store-connect is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.beautyfree/app-store-connect MCP server under?
io.github.beautyfree/app-store-connect declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.