Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.devinwang/google-play-developer-mcp

NPM · GOOGLE-PLAY-DEVELOPER-MCP

MCP server for Google Play: full Android Publisher API v3 and Play Developer Reporting API.

74 Trust /100

Last scanned (11 hours ago)

Scores higher than 44% of npm servers

Category E-commerce

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 42 of 117 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to devinwang/google-play-developer-mcp). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 2 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability58
  • AI-judged instruction clarity (fair).Partial
  • Tool/resource definitions use about 10902 tokens (~69/item across 157 items; 157 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage81
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 44% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 21 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "accounts_remove" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 157 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 22 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
  • 21 Oct 26 59

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 23 Oct 2026 · Analysed npm/google-play-developer-mcp@0.2.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo devinwang/google-play-developer-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/devinwang/google-play-developer-mcp/.github/workflows/release.yml@refs/tags/v0.2.0
Rekor log index 3346481120
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:0245e53db9d354f36bdb544e343b8690d49b385f85efcfbc89ea2177a8202295d913ed80a0812d3acc4002425ca25879399b1a18bb2cd2b5a2013cfe4

Background: How many MCP packages publish verified provenance →

Dependencies 117 packages
Packages resolved 117
Deprecated 1
Stale 41
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 157 exposed · ~10,902 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
reports_errors_counts_query ~78

Query aggregated error-count timelines.

NameTypeReqDescription
dimensionsarray––
filterstring––
metricsarray––
namestringyes–
pageSizenumber––
pageTokenstring––
timelineSpecobject––
userCohortstring––

No output schema declared.

No examples provided.

reports_errors_issues_search ~74

Search grouped error issues (ErrorIssue).

NameTypeReqDescription
filterstring––
intervalobject––
pageSizenumber––
pageTokenstring––
parentstringyesResource name in the form `apps/{packageName}` (e.g. apps/com.example)

No output schema declared.

No examples provided.

reports_errors_reports_search ~80

Search raw error reports (ErrorReport) within an issue or time window.

NameTypeReqDescription
filterstring––
intervalobject––
pageSizenumber––
pageTokenstring––
parentstringyesResource name in the form `apps/{packageName}` (e.g. apps/com.example)

No output schema declared.

No examples provided.

reports_excessive_wakeup_rate_get ~29

Get excessive-wake-up-rate metadata.

NameTypeReqDescription
namestringyes–

No output schema declared.

No examples provided.

reports_excessive_wakeup_rate_query ~84

Query excessive-wake-up-rate timeline.

NameTypeReqDescription
dimensionsarray––
filterstring––
metricsarray––
namestringyes–
pageSizenumber––
pageTokenstring––
timelineSpecobject––
userCohortstring––

No output schema declared.

No examples provided.

reports_lmk_rate_get ~31

Get Low-Memory-Killer (LMK) rate metadata.

NameTypeReqDescription
namestringyes–

No output schema declared.

No examples provided.

reports_lmk_rate_query ~79

Query LMK-rate timeline.

NameTypeReqDescription
dimensionsarray––
filterstring––
metricsarray––
namestringyes–
pageSizenumber––
pageTokenstring––
timelineSpecobject––
userCohortstring––

No output schema declared.

No examples provided.

reports_slow_rendering_rate_get ~27

Get slow-rendering-rate metadata.

NameTypeReqDescription
namestringyes–

No output schema declared.

No examples provided.

reports_slow_rendering_rate_query ~82

Query slow-rendering-rate timeline.

NameTypeReqDescription
dimensionsarray––
filterstring––
metricsarray––
namestringyes–
pageSizenumber––
pageTokenstring––
timelineSpecobject––
userCohortstring––

No output schema declared.

No examples provided.

reports_slow_start_rate_get ~25

Get slow-start-rate metadata.

NameTypeReqDescription
namestringyes–

No output schema declared.

No examples provided.

reports_slow_start_rate_query ~80

Query slow-start-rate timeline.

NameTypeReqDescription
dimensionsarray––
filterstring––
metricsarray––
namestringyes–
pageSizenumber––
pageTokenstring––
timelineSpecobject––
userCohortstring––

No output schema declared.

No examples provided.

reports_stuck_background_wake_lock_rate_get ~31

Get stuck-background-wake-lock-rate metadata.

NameTypeReqDescription
namestringyes–

No output schema declared.

No examples provided.

reports_stuck_background_wake_lock_rate_query ~86

Query stuck-background-wake-lock-rate timeline.

NameTypeReqDescription
dimensionsarray––
filterstring––
metricsarray––
namestringyes–
pageSizenumber––
pageTokenstring––
timelineSpecobject––
userCohortstring––

No output schema declared.

No examples provided.

reviews_get ~50

Get a single review by id.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
reviewIdstringyes–
translationLanguagestring––

No output schema declared.

No examples provided.

reviews_list ~86

List reviews from the last 7 days. Use token from the previous page for pagination. Optional filters: language, translationLanguage, device.

NameTypeReqDescription
maxResultsnumber––
packageNamestringyesAndroid application package name, e.g. com.example.app
startIndexnumber––
tokenstring––
translationLanguagestring––

No output schema declared.

No examples provided.

reviews_reply ~60

Post a public reply to a review. Replies can be edited by calling this again.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
replyTextstringyes–
reviewIdstringyes–

No output schema declared.

No examples provided.

subscription_base_plans_activate ~71

Activate a base plan — starts making it available for purchase.

NameTypeReqDescription
basePlanIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_base_plans_batch_migrate_prices ~74

Migrate prices on up to 100 base plans in one call.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
requestsarrayyes–

No output schema declared.

No examples provided.

subscription_base_plans_batch_update ~67

Upsert up to 100 base plans.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
requestsarrayyes–

No output schema declared.

No examples provided.

subscription_base_plans_batch_update_states ~69

Activate/deactivate up to 100 base plans.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
requestsarrayyes–

No output schema declared.

No examples provided.

subscription_base_plans_deactivate ~74

Deactivate a base plan — no new purchases; existing subscribers unaffected.

NameTypeReqDescription
basePlanIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_base_plans_delete ~68

Delete a base plan (must be inactive).

NameTypeReqDescription
basePlanIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_base_plans_migrate_prices ~100

Apply a price change to existing subscribers of a base plan in specific regions.

NameTypeReqDescription
basePlanIdstringyes–
latencyTolerancestring––
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
regionalPriceMigrationsarrayyes–
regionsVersion–––

No output schema declared.

No examples provided.

subscription_offers_activate ~77

Activate an offer — starts making it available for purchase.

NameTypeReqDescription
basePlanIdstringyes–
offerIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_offers_batch_get ~74

Batch-get up to 100 offers.

NameTypeReqDescription
basePlanIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
requestsarrayyes–

No output schema declared.

No examples provided.

subscription_offers_batch_update ~74

Upsert up to 100 offers.

NameTypeReqDescription
basePlanIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
requestsarrayyes–

No output schema declared.

No examples provided.

subscription_offers_batch_update_states ~76

Activate/deactivate up to 100 offers.

NameTypeReqDescription
basePlanIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
requestsarrayyes–

No output schema declared.

No examples provided.

subscription_offers_create ~95

Create an offer on a base plan (free trial, intro pricing, etc.).

NameTypeReqDescription
basePlanIdstringyes–
offerobjectyes–
offerIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
regionsVersion–––

No output schema declared.

No examples provided.

subscription_offers_deactivate ~72

Deactivate an offer.

NameTypeReqDescription
basePlanIdstringyes–
offerIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_offers_delete ~70

Delete an offer.

NameTypeReqDescription
basePlanIdstringyes–
offerIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_offers_get ~71

Get a single offer.

NameTypeReqDescription
basePlanIdstringyes–
offerIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_offers_list ~94

List offers for a base plan. `basePlanId` supports '-' wildcard to list across all.

NameTypeReqDescription
basePlanIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
pageSizenumber––
pageTokenstring––
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscription_offers_update ~108

Patch-update an offer.

NameTypeReqDescription
allowMissingboolean––
basePlanIdstringyes–
latencyTolerancestring––
offerobjectyes–
offerIdstringyes–
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
regionsVersion–––
updateMaskstring––

No output schema declared.

No examples provided.

subscriptions_archive ~64

Archive a subscription. Archived subscriptions are hidden from new purchases but existing subscribers keep access.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscriptions_batch_get ~46

Get up to 100 subscriptions in one call.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdsarrayyes–

No output schema declared.

No examples provided.

subscriptions_batch_update ~45

Update up to 100 subscriptions in one call.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
requestsarrayyes–

No output schema declared.

No examples provided.

subscriptions_create ~67

Create a subscription.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
regionsVersion–––
subscriptionobjectyesSubscription resource body

No output schema declared.

No examples provided.

subscriptions_delete ~71

Delete a subscription. Only works on subscriptions with no active base plans/offers.

NameTypeReqDescription
latencyTolerancestring––
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscriptions_get ~52

Get a single subscription.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console

No output schema declared.

No examples provided.

subscriptions_list ~55

List all subscriptions.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
pageSizenumber––
pageTokenstring––
showArchivedboolean––

No output schema declared.

No examples provided.

subscriptions_update ~100

Patch-update a subscription. Pass `updateMask` to limit the fields updated.

NameTypeReqDescription
allowMissingboolean––
latencyTolerancestring––
packageNamestringyesAndroid application package name, e.g. com.example.app
productIdstringyesProduct id / SKU — stable identifier you assign in Play Console
regionsVersion–––
subscriptionobjectyes–
updateMaskstring––

No output schema declared.

No examples provided.

system_apks_variants_create ~57

Create a new system APK variant for a versionCode.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
variantobjectyes–
versionCodestringyes–

No output schema declared.

No examples provided.

system_apks_variants_download ~58

Download a built system APK variant. Returns base64.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
variantIdnumberyes–
versionCodestringyes–

No output schema declared.

No examples provided.

system_apks_variants_get ~53

Get a system APK variant.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
variantIdnumberyes–
versionCodestringyes–

No output schema declared.

No examples provided.

system_apks_variants_list ~50

List system APK variants created for a given versionCode.

NameTypeReqDescription
packageNamestringyesAndroid application package name, e.g. com.example.app
versionCodestringyes–

No output schema declared.

No examples provided.

testers_get ~86

Get the current tester allowlist for a track.

NameTypeReqDescription
editIdstringyesEdit id returned by `edits_insert` — required for all edits.* writes
packageNamestringyesAndroid application package name, e.g. com.example.app
trackstringyesTrack name: internal, alpha, beta, production — or a custom closed-testing track id

No output schema declared.

No examples provided.

testers_patch ~92

Partial update of the tester allowlist.

NameTypeReqDescription
editIdstringyesEdit id returned by `edits_insert` — required for all edits.* writes
googleGroupsarray––
packageNamestringyesAndroid application package name, e.g. com.example.app
trackstringyesTrack name: internal, alpha, beta, production — or a custom closed-testing track id

No output schema declared.

No examples provided.

testers_update ~92

Full replacement of the tester allowlist.

NameTypeReqDescription
editIdstringyesEdit id returned by `edits_insert` — required for all edits.* writes
googleGroupsarray––
packageNamestringyesAndroid application package name, e.g. com.example.app
trackstringyesTrack name: internal, alpha, beta, production — or a custom closed-testing track id

No output schema declared.

No examples provided.

tracks_create ~103

Create a brand-new custom closed-testing track. The new id is set on the server. Type can only be closedTesting.

NameTypeReqDescription
editIdstringyesEdit id returned by `edits_insert` — required for all edits.* writes
packageNamestringyesAndroid application package name, e.g. com.example.app
trackstringyesId of the new track
trackConfigurationsarray––
typestring––

No output schema declared.

No examples provided.

tracks_get ~86

Get one track — includes all releases currently staged.

NameTypeReqDescription
editIdstringyesEdit id returned by `edits_insert` — required for all edits.* writes
packageNamestringyesAndroid application package name, e.g. com.example.app
trackstringyesTrack name: internal, alpha, beta, production — or a custom closed-testing track id

No output schema declared.

No examples provided.

Install

How do I install the io.github.devinwang/google-play-developer-mcp server?

io.github.devinwang/google-play-developer-mcp runs locally as an npm package, launched with npx -y google-play-developer-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · google-play-developer-mcp

# add to Claude Code
claude mcp add devinwang-google-play-developer-mcp -- npx -y google-play-developer-mcp
Common questions

What is the io.github.devinwang/google-play-developer-mcp server?

io.github.devinwang/google-play-developer-mcp is listed in the public MCP registry as io.github.devinwang/google-play-developer-mcp. MCP server for Google Play: full Android Publisher API v3 and Play Developer Reporting API. This page covers its npm package (google-play-developer-mcp).

Is the io.github.devinwang/google-play-developer-mcp server safe to use?

io.github.devinwang/google-play-developer-mcp scores 74 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 23 October 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.devinwang/google-play-developer-mcp server expose?

io.github.devinwang/google-play-developer-mcp exposes 157 tools: accounts_list, accounts_current, accounts_add, accounts_remove, accounts_switch, and 152 more. Their descriptions and schemas cost roughly 10,902 tokens of context every time the server is loaded.

Is the io.github.devinwang/google-play-developer-mcp server still maintained?

io.github.devinwang/google-play-developer-mcp is still listed as active in the MCP registry. We last reached this channel on 23 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.devinwang/google-play-developer-mcp server under?

io.github.devinwang/google-play-developer-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.