io.github.mikusnuz/app-publish

NPM · APP-PUBLISH-MCP · SCANNED AUG 3

MCP server for App Store Connect & Google Play Console — iOS/Android app management

Available components

+11 this week 63 63 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security79

No malware found by supply-chain analysis.Pass
CVE check failed: a known high-severity CVE affects uuid 9.0.1, reached via google-auth-library > gaxios > uuid. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (129 of 133), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 136 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability79

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 5005 tokens (~53/item across 93 items; 91 tools + 2 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage95

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
84% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · app-publish-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add mikusnuz-app-publish -- npx -y app-publish-mcp

# add to Codex CLI

codex mcp add mikusnuz-app-publish -- npx -y app-publish-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mikusnuz-app-publish": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "app-publish-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add mikusnuz-app-publish --command npx --arg -y --arg app-publish-mcp

# ~/.hermes/config.yaml

mcp_servers:
  mikusnuz-app-publish:
    command: "npx"
    args: ["-y", "app-publish-mcp"]

// mcp.json

{
  "mcpServers": {
    "mikusnuz-app-publish": {
      "command": "npx",
      "args": [
        "-y",
        "app-publish-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +32
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: MIT functional
1 Aug 26 −5
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
31 Jul 26 −23
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
29 Jul 26 +52
- CVE-2026-41907 affects this package: high ▼ security
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Schema quality: unverified → good ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → 100 ▲ functional
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Licence: MIT functional
28 Jul 26 −27
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
27 Jul 26 52

First indexed and scored.

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding

ID	CVE	Severity	Vector	Fix available
GHSA-w5hq-g745-h8pq	CVE-2026-41907	high	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	yes

Dependencies 129 packages

129 packages in the resolved dependency tree · 129 deprecated · 45 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 91 exposed · ~4,961 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

apple_add_beta_testers_to_group ~46

Add beta testers to a group

Input Output Examples

Name	Type	Req	Description
betaGroupId	string	yes	Beta Group ID
betaTesterIds	array	yes	Array of beta tester IDs

No output schema declared.

No examples provided.

apple_assign_build ~40

Assign a build to an App Store version

Input Output Examples

Name	Type	Req	Description
buildId	string	yes	Build ID
versionId	string	yes	App Store Version ID

No output schema declared.

No examples provided.

apple_cancel_submission ~29

Cancel an in-review submission (if still possible)

Input Output Examples

Name	Type	Req	Description
submissionId	string	yes	Submission ID

No output schema declared.

No examples provided.

apple_create_beta_group ~104

Create a beta group

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
feedbackEnabled	boolean	—	Enable feedback
hasAccessToAllBuilds	boolean	—	Auto-enable all new builds
isInternalGroup	boolean	—	Is internal group (Apple employees)
name	string	yes	Group name
publicLinkEnabled	boolean	—	Enable public TestFlight link
publicLinkLimit	number	—	Max testers via public link

No output schema declared.

No examples provided.

apple_create_bundle_id ~48

Input Output Examples

Name	Type	Req	Description
identifier	string	yes	Bundle ID (e.g. com.example.app)
name	string	yes	Display name
platform	string	yes	—

No output schema declared.

No examples provided.

apple_create_certificate ~65

Create a certificate

Input Output Examples

Name	Type	Req	Description
certificateType	string	yes	Certificate type (e.g. IOS_DEVELOPMENT, IOS_DISTRIBUTION, MAC_APP_DISTRIBUTION, DEVELOPER_ID_APPLICATION)
csrContent	string	yes	Certificate Signing Request (CSR) content

No output schema declared.

No examples provided.

apple_create_iap ~69

Create an in-app purchase

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
inAppPurchaseType	string	yes	IAP type
name	string	yes	IAP name
productId	string	yes	Product ID (e.g. com.example.app.coins100)

No output schema declared.

No examples provided.

apple_create_profile ~86

Create a provisioning profile

Input Output Examples

Name	Type	Req	Description
bundleIdId	string	yes	Bundle ID
certificateIds	array	yes	Array of certificate IDs
deviceIds	array	—	Array of device IDs (required for development profiles)
name	string	yes	Profile name
profileType	string	yes	Profile type (e.g. IOS_APP_DEVELOPMENT, IOS_APP_STORE)

No output schema declared.

No examples provided.

apple_create_screenshot_set ~74

Create a screenshot set for a specific display type

Input Output Examples

Name	Type	Req	Description
displayType	string	yes	Display type (e.g. APP_IPHONE_67, APP_IPHONE_65, APP_IPAD_PRO_129, APP_IPAD_PRO_3GEN_129)
localizationId	string	yes	Version Localization ID

No output schema declared.

No examples provided.

apple_create_subscription_group ~35

Create a subscription group

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
referenceName	string	yes	Reference name

No output schema declared.

No examples provided.

apple_create_version ~86

Create a new App Store version for submission

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
copyright	string	—	—
earliestReleaseDate	string	—	ISO 8601 date for scheduled release
platform	string	—	—
releaseType	string	—	—
versionString	string	yes	Version (e.g. 1.0.0)

No output schema declared.

No examples provided.

apple_create_version_localization ~100

Create a new localization for a version

Input Output Examples

Name	Type	Req	Description
description	string	—	—
keywords	string	—	Comma-separated keywords
locale	string	yes	Locale code (e.g. ko, en-US, ja)
marketingUrl	string	—	—
promotionalText	string	—	—
supportUrl	string	—	—
versionId	string	yes	App Store Version ID
whatsNew	string	—	—

No output schema declared.

No examples provided.

apple_delete_beta_group ~27

Delete a beta group

Input Output Examples

Name	Type	Req	Description
betaGroupId	string	yes	Beta Group ID

No output schema declared.

No examples provided.

apple_delete_beta_tester ~28

Delete a beta tester

Input Output Examples

Name	Type	Req	Description
betaTesterId	string	yes	Beta Tester ID

No output schema declared.

No examples provided.

apple_delete_iap ~29

Delete an in-app purchase

Input Output Examples

Name	Type	Req	Description
iapId	string	yes	In-App Purchase ID

No output schema declared.

No examples provided.

apple_delete_profile ~24

Delete a provisioning profile

Input Output Examples

Name	Type	Req	Description
profileId	string	yes	Profile ID

No output schema declared.

No examples provided.

apple_delete_screenshot ~24

Delete a screenshot

Input Output Examples

Name	Type	Req	Description
screenshotId	string	yes	Screenshot ID

No output schema declared.

No examples provided.

apple_delete_subscription_group ~26

Delete a subscription group

Input Output Examples

Name	Type	Req	Description
groupId	string	yes	Subscription Group ID

No output schema declared.

No examples provided.

apple_disable_capability ~30

Disable a capability on a bundle ID

Input Output Examples

Name	Type	Req	Description
capabilityId	string	yes	Bundle ID Capability ID

No output schema declared.

No examples provided.

apple_enable_capability ~170

Enable a capability on a bundle ID

Input Output Examples

Name	Type	Req	Description
bundleIdId	string	yes	Bundle ID
capabilityType	string	yes	Capability type (e.g. ICLOUD, PUSH_NOTIFICATIONS, IN_APP_PURCHASE, GAME_CENTER, WALLET, MAPS, ASSOCIATED_DOMAINS, PERSONAL_VPN, APP_GROUPS, HEALTHKIT, HOMEKIT, WIRELESS_ACCESSORY_CONFIGURATION, APPLE…
settings	array	—	Capability-specific settings

No output schema declared.

No examples provided.

apple_get_age_rating ~31

Get age rating declaration for an app info

Input Output Examples

Name	Type	Req	Description
appInfoId	string	yes	AppInfo ID

No output schema declared.

No examples provided.

apple_get_app ~30

Get detailed info about an app including latest version state

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID

No output schema declared.

No examples provided.

apple_get_app_info ~31

Get app info (categories, age rating, etc)

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID

No output schema declared.

No examples provided.

apple_get_iap ~29

Get in-app purchase details

Input Output Examples

Name	Type	Req	Description
iapId	string	yes	In-App Purchase ID

No output schema declared.

No examples provided.

apple_get_pricing ~25

Get current app pricing

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID

No output schema declared.

No examples provided.

apple_invite_beta_tester ~60

Invite a beta tester

Input Output Examples

Name	Type	Req	Description
betaGroupIds	array	yes	Array of beta group IDs
email	string	yes	Tester email
firstName	string	—	First name
lastName	string	—	Last name

No output schema declared.

No examples provided.

apple_list_app_info_localizations ~39

List app info localizations (app name, subtitle, privacy policy URL)

Input Output Examples

Name	Type	Req	Description
appInfoId	string	yes	AppInfo ID

No output schema declared.

No examples provided.

apple_list_apps ~30

List all apps in App Store Connect

Input Output Examples

Name	Type	Req	Description
limit	number	—	Max results (default 100)

No output schema declared.

No examples provided.

apple_list_availability ~28

List territories where the app is available

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID

No output schema declared.

No examples provided.

apple_list_beta_groups ~26

List beta groups

Input Output Examples

Name	Type	Req	Description
appId	string	—	Filter by app ID

No output schema declared.

No examples provided.

apple_list_beta_testers ~37

List beta testers

Input Output Examples

Name	Type	Req	Description
appId	string	—	Filter by app ID
email	string	—	Filter by email

No output schema declared.

No examples provided.

apple_list_builds ~48

List builds uploaded to App Store Connect

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
limit	number	—	—
preReleaseVersion	string	—	Filter by version string

No output schema declared.

No examples provided.

apple_list_bundle_id_capabilities ~30

List capabilities for a bundle ID

Input Output Examples

Name	Type	Req	Description
bundleIdId	string	yes	Bundle ID

No output schema declared.

No examples provided.

apple_list_bundle_ids ~22

List registered bundle IDs

Input Output Examples

Name	Type	Req	Description
limit	number	—	—

No output schema declared.

No examples provided.

apple_list_certificates ~80

List certificates

Input Output Examples

Name	Type	Req	Description
certificateType	string	—	Filter by certificate type (e.g. IOS_DEVELOPMENT, IOS_DISTRIBUTION, MAC_APP_DISTRIBUTION, MAC_INSTALLER_DISTRIBUTION, MAC_APP_DEVELOPMENT, DEVELOPER_ID_KEXT, DEVELOPER_ID_APPLICATION, DEVELOPER_ID_IN…

No output schema declared.

No examples provided.

apple_list_devices ~33

List registered devices

Input Output Examples

Name	Type	Req	Description
platform	string	—	Filter by platform
status	string	—	Filter by status

No output schema declared.

No examples provided.

apple_list_iap ~28

List in-app purchases for an app

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID

No output schema declared.

No examples provided.

apple_list_profiles ~122

List provisioning profiles

Input Output Examples

Name	Type	Req	Description
name	string	—	Filter by profile name
profileType	string	—	Filter by profile type (e.g. IOS_APP_DEVELOPMENT, IOS_APP_STORE, IOS_APP_ADHOC, IOS_APP_INHOUSE, MAC_APP_DEVELOPMENT, MAC_APP_STORE, MAC_APP_DIRECT, TVOS_APP_DEVELOPMENT, TVOS_APP_STORE, TVOS_APP_ADH…

No output schema declared.

No examples provided.

apple_list_reviews ~40

List customer reviews for an app

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
limit	number	—	—
sort	string	—	—

No output schema declared.

No examples provided.

apple_list_screenshot_sets ~29

List screenshot sets for a localization

Input Output Examples

Name	Type	Req	Description
localizationId	string	yes	Version Localization ID

No output schema declared.

No examples provided.

apple_list_subscription_groups ~27

List subscription groups for an app

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID

No output schema declared.

No examples provided.

apple_list_version_localizations ~31

List all localizations for a version

Input Output Examples

Name	Type	Req	Description
versionId	string	yes	App Store Version ID

No output schema declared.

No examples provided.

apple_list_versions ~60

List all App Store versions for an app

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
platform	string	—	—
state	string	—	Filter by state (e.g. PREPARE_FOR_SUBMISSION, READY_FOR_SALE)

No output schema declared.

No examples provided.

apple_register_device ~42

Input Output Examples

Name	Type	Req	Description
name	string	yes	Device name
platform	string	yes	Platform
udid	string	yes	Device UDID

No output schema declared.

No examples provided.

apple_remove_beta_testers_from_group ~46

Remove beta testers from a group

Input Output Examples

Name	Type	Req	Description
betaGroupId	string	yes	Beta Group ID
betaTesterIds	array	yes	Array of beta tester IDs

No output schema declared.

No examples provided.

apple_respond_to_review ~38

Respond to a customer review

Input Output Examples

Name	Type	Req	Description
responseBody	string	yes	Response text
reviewId	string	yes	Customer Review ID

No output schema declared.

No examples provided.

apple_revoke_certificate ~25

Revoke a certificate

Input Output Examples

Name	Type	Req	Description
certificateId	string	yes	Certificate ID

No output schema declared.

No examples provided.

apple_set_price ~69

Set app price (free or paid). Use price tier ID from Apple price points.

Input Output Examples

Name	Type	Req	Description
appId	string	yes	App ID
priceTierId	string	yes	Price tier ID (use "0" for free)
startDate	string	—	ISO 8601 start date

No output schema declared.

No examples provided.

apple_submit_for_review ~30

Submit an App Store version for review

Input Output Examples

Name	Type	Req	Description
versionId	string	yes	App Store Version ID

No output schema declared.

No examples provided.

apple_update_age_rating ~135

Update age rating declaration

Input Output Examples

Name	Type	Req	Description
ageRatingId	string	yes	Age Rating Declaration ID
alcoholTobaccoOrDrugUseOrReferences	string	—	—
gamblingAndContests	boolean	—	—
gamblingSimulated	string	—	—
horrorOrFearThemes	string	—	—
medicalOrTreatmentInformation	string	—	—
profanityOrCrudeHumor	string	—	—
sexualContentOrNudity	string	—	—
unrestrictedWebAccess	boolean	—	—
violenceCartoonOrFantasy	string	—	—
violenceRealistic	string	—	—

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug

Day	Score
27 Jul	52
28 Jul	25
29 Jul	77
30 Jul	59
31 Jul	36
1 Aug	31
2 Aug	63
3 Aug	63