io.github.IsaiahDupree/storebridge-mcp

REMOTE · STOREBRIDGE-MCP.VERCEL.APP · SCANNED AUG 3

Remote MCP connector for App Store + Google Play data via StoreBridge API. No auth required.

Available components

72 72 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security80

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail

Transport & Reachability100

Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass

Schema Quality & AI Usability70

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 1849 tokens (~142/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management7

Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · storebridge-mcp.vercel.app

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http isaiahdupree-storebridge-mcp https://storebridge-mcp.vercel.app/mcp

# ~/.codex/config.toml

[mcp_servers.isaiahdupree-storebridge-mcp]
url = "https://storebridge-mcp.vercel.app/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "isaiahdupree-storebridge-mcp": {
      "type": "remote",
      "url": "https://storebridge-mcp.vercel.app/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add isaiahdupree-storebridge-mcp --url https://storebridge-mcp.vercel.app/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  isaiahdupree-storebridge-mcp:
    url: "https://storebridge-mcp.vercel.app/mcp"

// mcp.json

{
  "mcpServers": {
    "isaiahdupree-storebridge-mcp": {
      "type": "http",
      "url": "https://storebridge-mcp.vercel.app/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
2 Aug 26 0
- Stability: unverified → 0.03 ▲ functional
1 Aug 26 71

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://storebridge-mcp.vercel.app/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=*.vercel.app	CN=WR1,O=Google Trust Services,C=US	28 Jun 2026	26 Sept 2026	RSA 2048	SHA256-RSA	b1c2b607df94f28513779ae26fecf92f
SANs: *.vercel.app
CN=WR1,O=Google Trust Services,C=US (CA)	CN=GTS Root R1,O=Google Trust Services LLC,C=US	13 Dec 2023	20 Feb 2029	RSA 2048	SHA256-RSA	7fd9e2c2d2048a0474b627a26d0868a7
CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA)	CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE	19 Jun 2020	28 Jan 2028	RSA 4096	SHA256-RSA	77bd0d6cdb36f91aea210fc4f058d30d

DNSSEC insecure

Validation of storebridge-mcp.vercel.app. — Not signed

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
app.	present	23684	8	Verified
vercel.app.	absent			Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation

Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result	No authorisation required
HTTP status	200

Header	Value
strict-transport-security	max-age=63072000; includeSubDomains; preload

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://storebridge-mcp.vercel.app/mcp	Verified	200
http (plaintext)	http://storebridge-mcp.vercel.app/mcp	HTTPS enforced	308	https://storebridge-mcp.vercel.app/mcp

MCP tools — 13 exposed · ~1,849 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

autocomplete_suggest Autocomplete search suggestions ~83

Up to 5 autocomplete completions for a partial search query. First-class on both stores.

Input Output Examples

Name	Type	Req	Description
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
lang	string	—	Language. Derived from country when omitted.
store	string	yes	Target store.
term	string	yes	Partial query.

No output schema declared.

No examples provided.

get_app Get app details ~156

Full details for one app: description, version, release dates, content rating, genres, screenshots, languages, rating (with histogram and current-version stats), version history, size, installs, IAP flag, privacy policy, and store-specific extras. {id} is the Apple trackId (numeric string, e.g. 6448311069) or the Google package name (e.g. com.whatsapp).

Input Output Examples

Name	Type	Req	Description
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
id	string	yes	Apple trackId (numeric string) or Google package name.
lang	string	—	Language. Derived from country when omitted.
store	string	yes	Target store.

No output schema declared.

No examples provided.

get_app_datasafety Get app data safety (Google only) ~80

Google Play "Data safety" section for one app: data shared, data collected, security practices, and privacy policy URL. Google only — passing store="apple" returns a not_supported error.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Google package name.
lang	string	—	Language.
store	string	—	Must be google. Default google.

No output schema declared.

No examples provided.

get_app_permissions Get app permissions (Google only) ~69

Google Play declared device/data permissions for one app, grouped by permission group. Google only — passing store="apple" returns a not_supported error.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Google package name.
lang	string	—	Language.
store	string	—	Must be google. Default google.

No output schema declared.

No examples provided.

get_app_reviews Get app reviews ~241

Reviews for one app. Apple reviews come from the customerreviews RSS feed and are hard-capped at 500 per app per country (50/page x pages 1-10); page>10 returns an error, and sort="rating" is not supported for Apple. Google reviews are token-paginated and effectively unbounded — pass the nextToken from a prior call's pagination to page forward.

Input Output Examples

Name	Type	Req	Description
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
id	string	yes	Apple trackId (numeric string) or Google package name.
lang	string	—	Language. Derived from country when omitted.
limit	integer	—	Apple clamped to 50. Google ~150-200/page. Default 50.
page	integer	—	Apple only, 1-10 (RSS is fixed 50/page). Default 1.
sort	string	—	Sort order. "rating" is unsupported for Apple. Default recent.
store	string	yes	Target store.
token	string	—	Google only. The nextToken from a prior page's pagination.

No output schema declared.

No examples provided.

get_apps_batch Look up apps by bundle id or batch of ids ~197

Resolve a single Apple app by bundleId (e.g. com.burbn.instagram), or fetch many apps at once with a comma-separated ids batch (Apple up to ~200 ids in one round-trip; Google fans out and coalesces). A batch request returns an "apps" array; a bundleId request returns a single "app". Supports store="both" for batch lookups.

Input Output Examples

Name	Type	Req	Description
bundleId	string	—	Apple bundle id to resolve, e.g. com.burbn.instagram. Mutually informative with ids.
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
ids	string	—	Comma-separated app ids for a batch lookup (up to ~200).
lang	string	—	Language. Derived from country when omitted.
store	string	yes	Target store. "both" is supported for batch (ids) lookups.

No output schema declared.

No examples provided.

get_aso_keywords Get ASO keyword ideas (estimated) ~111

Directional keyword ideas for a seed term, each with a difficulty score/label, traffic score, result count, and top competitors — derived from live search/suggest results, not panel data. Every result is labeled estimated:true.

Input Output Examples

Name	Type	Req	Description
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
lang	string	—	Language. Derived from country when omitted.
store	string	yes	Target store.
term	string	yes	Seed keyword.

No output schema declared.

No examples provided.

get_aso_rank Get ASO keyword rank (estimated, point-in-time) ~135

Point-in-time rank of one app across up to 20 keywords (one live search per keyword, fan-out capped at 20). Every result is labeled estimated:true. This is a snapshot, not rank tracking over time.

Input Output Examples

Name	Type	Req	Description
appId	string	yes	Target app id (Apple trackId or Google package name).
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
keywords	string	yes	Comma-separated keywords, max 20.
lang	string	—	Language. Derived from country when omitted.
store	string	yes	Target store.

No output schema declared.

No examples provided.

get_categories Get categories / genres ~52

List categories for a store. Apple returns its static 6000/7000-range genre map; Google returns its categories() constants.

Input Output Examples

Name	Type	Req	Description
lang	string	—	Language.
store	string	yes	Target store.

No output schema declared.

No examples provided.

get_charts Get top charts ~229

Ranked top-chart entries (App summary plus rank) for a store. type is free/paid/grossing (Apple also supports new/newfree/newpaid). category is an Apple genre id (e.g. 6007) or a Google category constant (e.g. PRODUCTIVITY); omit for the overall chart. Google list() may return an empty array with meta.stale=true when a region is broken.

Input Output Examples

Name	Type	Req	Description
category	string	—	Apple genre id (e.g. 6007) or Google category constant (e.g. PRODUCTIVITY). Omit for overall chart.
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
fullDetail	boolean	—	Google only; expensive. Default false.
limit	integer	—	Apple practical max ~200; Google up to ~660 (usually <=500). Default 50.
store	string	yes	Target store.
type	string	—	Chart type: free, paid, grossing (Apple also: new, newfree, newpaid). Default free.

No output schema declared.

No examples provided.

get_developer Get developer portfolio ~135

A developer record plus their published apps. {id} is the Apple artistId (numeric) or the Google developerId string (e.g. "Google LLC").

Input Output Examples

Name	Type	Req	Description
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
fullDetail	boolean	—	Google only; expensive. Default false.
id	string	yes	Apple artistId (numeric) or Google developerId string.
lang	string	—	Language. Derived from country when omitted.
limit	integer	—	Max apps returned. Default 60.
store	string	yes	Target store.

No output schema declared.

No examples provided.

get_similar_apps Get similar apps ~105

"Customers also bought" / related apps for one app. First-class on both stores.

Input Output Examples

Name	Type	Req	Description
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
id	string	yes	Apple trackId (numeric string) or Google package name.
lang	string	—	Language. Derived from country when omitted.
limit	integer	—	Max results. Default 20.
store	string	yes	Target store.

No output schema declared.

No examples provided.

search_apps Search apps ~256

Search apps on the Apple App Store, Google Play, or both. Returns matching apps with store, title, developer, icon, price, rating, category, and url. Use store="both" to fan out to both engines and merge results. Apple limit is clamped to 50; Google supports 1-250. The price filter (free/paid) only applies to Google.

Input Output Examples

Name	Type	Req	Description
country	string	—	ISO-3166 alpha-2 storefront/region, lowercase. Defaults to us.
device	string	—	Apple only. Maps to software / iPadSoftware / macSoftware. Default iphone.
fullDetail	boolean	—	Google only; expensive (per-result full fetch). Default false.
lang	string	—	Language (Apple form en_us, Google form en). Derived from country when omitted.
limit	integer	—	Max results. Apple is clamped to 50; Google accepts 1-250. Default 50.
price	string	—	Price filter. Google only; Apple ignores it. Default all.
store	string	yes	Target store. "both" fans out to both engines and merges results.
term	string	yes	URL-encoded search term.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

1 Aug 3 Aug