Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

ASOClimb

REMOTE · ASOCLIMB.COM

App Store and Google Play keyword research, rank tracking, competitors, charts and niche analysis.

Available components

36 Trust /100

Last scanned (7 hours ago)

Scores higher than 19% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Marketing and SEO

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security89
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema blocked by authentication: the endpoint requires auth we don't have to read it. See how to fix → Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Tool Safety0
  • Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Capabilities0
  • Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. See how to fix → Unverified

Unverified: 6 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm. Claim this server and supply a read-only token to verify it and lift the score.

What we tested

Checks we ran (5)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC

Checks we could not complete (6)

These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.

  • Transport in Transport & Reachability (scores 0 for this)Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
  • Schema quality in Schema Quality & AI Usability (scores 0 for this)Schema blocked by authentication: the endpoint requires auth we don't have to read it.
  • Stability in Stability & Change Management (scores 0 for this)Stability not yet verified: not enough scan history yet (needs a 30-day window).
  • Tool coverage in Tool Coverage (scores 0 for this)Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
  • Tool safety in Tool Safety (scores 0 for this)Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.
  • Capabilities in Capabilities (scores 0 for this)Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 0
    • Endpoint reachability: reachable → behind authorisation ▼ security
  • 1 Nov 26 36

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://asoclimb.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=asoclimb.com CN=WE1,O=Google Trust Services,C=US 28 Oct 2026 26 Jan 2027 ECDSA 256 ECDSA-SHA256 a5bdfef5357cfa70ee4d66de6a6428e
SANs: asoclimb.com, assets.asoclimb.com, *.assets.asoclimb.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of asoclimb.com. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
com. DS published 19718 13 Verified
asoclimb.com. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On connection
HTTP status 401

WWW-Authenticate challenge Bearer realm="ASOClimb MCP", resource_metadata="https://asoclimb.com/.well-known/oauth-protected-resource"

Bearer realm="ASOClimb MCP", resource_metadata="https://asoclimb.com/.well-known/oauth-protected-resource"
Header Value
x-content-type-options nosniff
referrer-policy no-referrer
permissions-policy camera=(), microphone=(), geolocation=()
www-authenticate Bearer realm="ASOClimb MCP", resource_metadata="https://asoclimb.com/.well-known/oauth-protected-resource"

Protected resource metadata

Document https://asoclimb.com/.well-known/oauth-protected-resource
Retrieved Yes
Resource https://asoclimb.com/mcp
Authorisation server https://asoclimb.com

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://asoclimb.com/mcp Auth required 401
http (plaintext) http://asoclimb.com/mcp HTTPS enforced 301 https://asoclimb.com/mcp
MCP tools · 43 exposed · ~3,217 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
add_application ~157

Track an app by bundle id (Apple) or package name (Google Play). Discovery then auto-tracks keywords and competitors when auto_track is on.

NameTypeReqDescription
auto_trackboolean–Discover and track keywords and competitors automatically (default true).
bundle_idstringyesBundle id or package name.
countrystringyesISO country code, e.g. US, GB, IN.
languagestring–Language code, e.g. en. Defaults to en.
platformstring–Apple platform: ios (iPhone & iPad, default) or macos (the Mac App Store). apple_app_store only.
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

add_competitor ~47

Track a competitor app for one of your applications.

NameTypeReqDescription
application_idstringyesYour application id.
competitor_bundle_idstringyesCompetitor bundle id or package name.

No output schema declared.

No examples provided.

check_listing_metadata ~213

Check any App Store or Google Play listing, tracked or not: reads its public title and description now and runs the metadata checks on them plus any subtitle, keyword field or terms you supply. Stores nothing.

NameTypeReqDescription
bundle_idstringyesBundle id or package name.
candidatesarray–Extra terms to simulate besides the tracked keywords (up to 50).
countrystringyesISO country code.
descriptionstring–Description (4000). Indexed by Google Play, not by the App Store.
keywordsstring–App Store keyword field (100, comma separated, no spaces needed). Not public: supply your own.
languagestring–Language code (default en).
short_descriptionstring–Google Play short description (80).
storestringyes–
subtitlestring–App Store subtitle (30). Not public: supply the live one from App Store Connect.
titlestring–Title (30 characters on both stores).

No output schema declared.

No examples provided.

compare_metadata_draft ~47

One saved draft compared field by field with the live listing, re-simulated against the current rank observations.

NameTypeReqDescription
draft_idstringyesDraft id from list_metadata_drafts.

No output schema declared.

No examples provided.

discover_keywords ~104

Run keyword discovery for an application: title seeds, store suggestions and the titles of the apps that outrank it. With track true it also tracks the best candidates within the plan and up to five competitors.

NameTypeReqDescription
application_idstringyesApplication id.
max_keywordsinteger–Maximum keywords to track when track is true (default 15).
trackboolean–Track the best candidates and up to five competitors within the plan (default false: preview only).

No output schema declared.

No examples provided.

expand_keyword_gap ~115

Widen a competitor's keyword gap: ask the store autocomplete about words from the competitor's title (or the prefixes given) and inspect new suggestions. Spends one autocomplete request per prefix and one keyword inspection per inspected term from the monthly allowances, then returns the refreshed gap.

NameTypeReqDescription
competitor_idstringyesCompetitor id.
max_termsinteger–Most suggestions to inspect (default 5, max 10).
prefixesarray–Up to 3 prefixes (default: words from the competitor title).

No output schema declared.

No examples provided.

get_account_usage ~24

Plan, limits and month-to-date usage for the workspace behind this key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_app_score_history ~51

Rank observations for an application across all its keywords over a window.

NameTypeReqDescription
application_idstringyesApplication id.
daysinteger–Window in days (default 7, max 90).

No output schema declared.

No examples provided.

get_application ~34

One application with its tracked keywords, competitors and listing snapshots.

NameTypeReqDescription
application_idstringyesApplication id from list_applications.

No output schema declared.

No examples provided.

get_capabilities ~28

Which stores and data sources this deployment serves: Google Play status, chart catalogs, autocomplete sources.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_category_rank ~49

Where one of your applications sits in its own category chart today, plus the stored daily history. Records today's observation.

NameTypeReqDescription
application_idstringyesApplication id.
collectionstring––

No output schema declared.

No examples provided.

get_competitor_keywords ~33

Keywords where a competitor ranks, from your tracked observations.

NameTypeReqDescription
competitor_idstringyesCompetitor id.

No output schema declared.

No examples provided.

get_dashboard ~42

Workspace dashboard: totals, movers, alerts and scheduler status. A mover with change null entered the observed results (previous_rank null) or left them (current_rank null).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_keyword_gap ~82

Keyword gap against one tracked competitor: terms it ranks for in the top 30 where your app does not (with both ranks, modeled traffic, difficulty and an opportunity score), plus shared and only-you lists. Terms come only from this workspace's tracked keywords and its own keyword inspections.

NameTypeReqDescription
competitor_idstringyesCompetitor id from list_competitors.

No output schema declared.

No examples provided.

get_keyword_inspection ~28

One stored inspection with its full breakdown.

NameTypeReqDescription
inspection_idstringyesInspection id.

No output schema declared.

No examples provided.

get_keyword_rank_history ~49

Daily rank, traffic, difficulty and KEI observations for a tracked keyword.

NameTypeReqDescription
daysinteger–Window in days (default 30).
keyword_idstringyesTracking id.

No output schema declared.

No examples provided.

get_metadata ~68

The stored live listing of a tracked application (title and description from the store; subtitle, keyword field or short description from the draft marked current), store character limits, checks on the live copy, the coverage of its tracked keywords and the saved drafts.

NameTypeReqDescription
application_idstringyesApplication id.

No output schema declared.

No examples provided.

get_scheduler_health ~47

Whether the hourly observation job is running and how much of this workspace it has covered today: heartbeat state, tracked vs observed-today counts and the last 24 runs that included this workspace.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

inspect_keyword ~145

Live keyword inspection: top apps, traffic/difficulty/KEI scores with breakdown (including autocomplete demand), related keywords. Spends one keyword inspection from the monthly plan allowance and stores the result.

NameTypeReqDescription
countrystringyesISO country code, e.g. US, GB, IN.
keywordstringyesKeyword to inspect.
languagestring–Language code, e.g. en. Defaults to en.
platformstring–Apple platform: ios (iPhone & iPad, default) or macos (the Mac App Store). apple_app_store only.
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

list_alert_events ~14

Recent rank alert events.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_applications ~22

List the applications tracked in this workspace with their latest listing facts.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_autocomplete_history ~14

Stored autocomplete observations.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_competitors ~34

Competitors tracked for an application (or the whole workspace).

NameTypeReqDescription
application_idstring–Filter by application id.

No output schema declared.

No examples provided.

list_keyword_gaps ~40

Keyword-gap summary for every tracked competitor of an application, with each competitor's five best gap terms.

NameTypeReqDescription
application_idstringyesApplication id.

No output schema declared.

No examples provided.

list_keyword_inspections ~18

Recent stored keyword inspections in the workspace.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_keyword_opportunities ~78

Keyword opportunities for one application, assembled only from what this workspace already stored (tracked terms and their rank observations, saved inspections, saved store suggestions, tracked competitors and the listing itself). Reads no store, so `status` is "pending" until a discovery pass has completed for the listing.

NameTypeReqDescription
application_idstringyesApplication id.

No output schema declared.

No examples provided.

list_keywords ~130

Tracked keywords with current rank, traffic, difficulty, KEI, favorite flag and movement. rank_change is the places gained since the previous observation day (negative = lost); it is null, not 0, when there is no earlier day or when either day did not rank (the keyword entered or left the observed depth: compare current_rank with previous_rank).

NameTypeReqDescription
application_idstring–Filter by application id.
countrystring–ISO country code, e.g. US, GB, IN.
storestring–Store. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

list_metadata_drafts ~40

Saved metadata drafts for a tracked application, with the coverage and check counts stored when each was saved.

NameTypeReqDescription
application_idstringyesApplication id.

No output schema declared.

No examples provided.

list_new_release_categories ~47

New-release collections and categories available for a store, with the coverage each store can honestly answer.

NameTypeReqDescription
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

list_niche_analyses ~29

Stored niche analyses: topic, storefront, schema version and opportunity score with its range.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_top_chart_categories ~37

Chart collections and categories available for a store.

NameTypeReqDescription
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

new_releases ~178

Apps released to a storefront within a recent window, flagged with the chart position of the ones already ranking. Observed price, in-app purchase and audience fields only: neither store publishes per-app revenue, and none is estimated.

NameTypeReqDescription
categorystring–Category id from list_new_release_categories (default overall).
collectionstring–Collection id from list_new_release_categories (App Store: free, paid, grossing; Google Play: new_free, new_paid).
countrystringyesISO country code, e.g. US, GB, IN.
daysinteger–Release window in days (default 7, max 30).
languagestring–Language code, e.g. en. Defaults to en.
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

remove_competitor ~31

Stop tracking a competitor.

NameTypeReqDescription
competitor_idstringyesCompetitor id from list_competitors.

No output schema declared.

No examples provided.

run_autocomplete ~117

Live store search suggestions for a prefix, in the order the store shows them (Apple search hints / Google Play suggest). Spends one autocomplete request from the monthly plan allowance and stores the observation.

NameTypeReqDescription
countrystringyesISO country code, e.g. US, GB, IN.
languagestring–Language code, e.g. en. Defaults to en.
prefixstringyesWhat the shopper has typed so far.
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

run_niche_analysis ~210

Analyze a niche from a seed keyword: related terms from store suggestions and title phrases, clusters, modeled market size (ranges), success rate above a threshold, newcomer success, top-3 concentration, keyword difficulty, and a 0-100 opportunity score with its range and components. Spends one niche analysis from the monthly plan allowance and stores the result.

NameTypeReqDescription
countrystringyesISO country code, e.g. US, GB, IN.
languagestring–Language code, e.g. en. Defaults to en.
platformstring–Apple platform: ios (iPhone & iPad, default) or macos (the Mac App Store). apple_app_store only.
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.
thresholdnumber–Monthly success threshold (default 10000).
threshold_metricstring–What the threshold measures (default revenue).
topicstringyesTopic or seed phrase.

No output schema declared.

No examples provided.

save_metadata_draft ~187

Save listing copy as a named draft for a tracked application, optionally marking it as the copy that is live today (fills the private fields of the live baseline). Counts against the monthly draft-save allowance.

NameTypeReqDescription
application_idstringyesApplication id.
descriptionstring–Description (4000). Indexed by Google Play, not by the App Store.
is_currentboolean–This is the copy live in the store today.
keywordsstring–App Store keyword field (100, comma separated, no spaces needed). Not public: supply your own.
namestring–Draft name.
short_descriptionstring–Google Play short description (80).
subtitlestring–App Store subtitle (30). Not public: supply the live one from App Store Connect.
titlestringyesTitle (30 characters on both stores).

No output schema declared.

No examples provided.

search_store ~96

Search a store for apps by name or keyword (listing metadata for up to 12 results, flagged when already tracked).

NameTypeReqDescription
countrystringyesISO country code, e.g. US, GB, IN.
languagestring–Language code, e.g. en. Defaults to en.
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.
termstringyesSearch term.

No output schema declared.

No examples provided.

set_keyword_favorite ~38

Mark or unmark a tracked keyword as a favorite.

NameTypeReqDescription
favoritebooleanyes–
keyword_idstringyesTracking id.

No output schema declared.

No examples provided.

simulate_metadata ~208

Check proposed listing copy for a tracked application and simulate it: character counters against store limits, duplicate and wasted words, keyword-field spacing, competitor brand names, Google Play description density, and which tracked or candidate keywords become covered or uncovered with a modeled coverage score (live vs draft). Coverage is a model, not a rank prediction. Stores nothing.

NameTypeReqDescription
application_idstringyesApplication id.
candidatesarray–Extra terms to simulate besides the tracked keywords (up to 50).
descriptionstring–Description (4000). Indexed by Google Play, not by the App Store.
keywordsstring–App Store keyword field (100, comma separated, no spaces needed). Not public: supply your own.
short_descriptionstring–Google Play short description (80).
subtitlestring–App Store subtitle (30). Not public: supply the live one from App Store Connect.
titlestringyesTitle (30 characters on both stores).

No output schema declared.

No examples provided.

top_charts ~127

Top free, paid or grossing chart for a store, country and category, with daily movement and new entries.

NameTypeReqDescription
categorystring–Category id from list_top_chart_categories (default overall).
collectionstring––
countrystringyesISO country code, e.g. US, GB, IN.
languagestring–Language code, e.g. en. Defaults to en.
limitinteger–Rows (default 100, max 200).
storestringyesStore. Google Play needs GOOGLE_PLAY_SOURCE on the deployment.

No output schema declared.

No examples provided.

track_keyword_opportunities ~67

Track up to 20 opportunity terms for an application. Terms the plan or the tracker rejects come back in `skipped` with a reason rather than being dropped silently.

NameTypeReqDescription
application_idstringyesApplication id.
termsarrayyesTerms from list_keyword_opportunities.

No output schema declared.

No examples provided.

track_keywords ~45

Track up to 20 keywords for an application; each gets an immediate rank observation.

NameTypeReqDescription
application_idstringyesApplication id.
keywordsarrayyesKeywords to track.

No output schema declared.

No examples provided.

untrack_keyword ~47

Stop tracking a keyword. History is kept unless purge is true.

NameTypeReqDescription
keyword_idstringyesTracking id from list_keywords.
purgeboolean–Delete the rank history too.

No output schema declared.

No examples provided.

Install

How do I install the ASOClimb MCP server?

ASOClimb is a hosted endpoint at https://asoclimb.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · asoclimb.com

# add to Claude Code
claude mcp add --transport http com-asoclimb-aso 'https://asoclimb.com/mcp'
Common questions

What is the ASOClimb MCP server?

ASOClimb is an MCP server listed in the public MCP registry as com.asoclimb/aso. App Store and Google Play keyword research, rank tracking, competitors, charts and niche analysis. This page covers its hosted endpoint (https://asoclimb.com/mcp).

Is the ASOClimb MCP server safe to use?

ASOClimb scores 36 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ASOClimb MCP server expose?

ASOClimb exposes 43 tools: get_account_usage, get_capabilities, search_store, list_applications, get_application, and 38 more. Their descriptions and schemas cost roughly 3,217 tokens of context every time the server is loaded.

Does the ASOClimb MCP server require authentication?

Yes. ASOClimb asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the ASOClimb MCP server still maintained?

ASOClimb is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the ASOClimb MCP server?

VerifyMCP ran 5 checks on ASOClimb, covering TLS certificate, Authorization, HTTPS, HSTS header and 1 more. 6 items could not be completed, a gap on our side rather than a finding about ASOClimb: Transport, Schema quality, Stability, Tool coverage and 2 more. 6 categories score 0 for that reason, because we only credit what we can confirm. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.