Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

io.github.mikusnuz/app-publish

NPM · APP-PUBLISH-MCP · SCANNED AUG 3

MCP server for App Store Connect & Google Play Console — iOS/Android app management

Available components

+11 this week 63 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security79
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects uuid 9.0.1, reached via google-auth-library > gaxios > uuid. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (129 of 133), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability79
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 5005 tokens (~53/item across 93 items; 91 tools + 2 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage95
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 84% of tool parameters carry a description.Partial
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · app-publish-mcp

# add to Claude Code
claude mcp add mikusnuz-app-publish -- npx -y app-publish-mcp
# add to Codex CLI
codex mcp add mikusnuz-app-publish -- npx -y app-publish-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mikusnuz-app-publish": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "app-publish-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add mikusnuz-app-publish --command npx --arg -y --arg app-publish-mcp
# ~/.hermes/config.yaml
mcp_servers:
  mikusnuz-app-publish:
    command: "npx"
    args: ["-y", "app-publish-mcp"]
// mcp.json
{
  "mcpServers": {
    "mikusnuz-app-publish": {
      "command": "npx",
      "args": [
        "-y",
        "app-publish-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Aug 26 +32
    • Known CVEs: unverified → fail security
    • Provenance: unverified → fail security
    • Install scripts: unverified → pass security
    • Malware scan: unverified → pass security
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • Maintenance: unverified → pass functional
    • Dependency health: unverified → partial functional
    • License: unverified → pass functional
    • MCP protocol: unverified → pass functional
    • Licence: MIT functional
  • 1 Aug 26 −5
    • Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
    • Capabilities: pass → unverified functional
  • 31 Jul 26 −23
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −18
    • Malware scan: pass → unverified security
  • 29 Jul 26 +52
    • CVE-2026-41907 affects this package: high security
    • Known CVEs: unverified → fail security
    • Provenance: unverified → fail security
    • Install scripts: unverified → pass security
    • Schema quality: unverified → good functional
    • Maintenance: unverified → pass functional
    • Schema quality: unverified → 100 functional
    • License: unverified → pass functional
    • Tool coverage: unverified → 100 functional
    • Licence: MIT functional
  • 28 Jul 26 −27
    • Tool coverage: 100 → unverified functional
    • Schema quality: 100 → unverified functional
    • Dependency health: unverified → partial functional
  • 27 Jul 26 52

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-w5hq-g745-h8pq CVE-2026-41907 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N yes
Dependencies 129 packages

129 packages in the resolved dependency tree · 129 deprecated · 45 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 91 exposed · ~4,961 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
apple_add_beta_testers_to_group ~46

Add beta testers to a group

NameTypeReqDescription
betaGroupIdstringyesBeta Group ID
betaTesterIdsarrayyesArray of beta tester IDs

No output schema declared.

No examples provided.

apple_assign_build ~40

Assign a build to an App Store version

NameTypeReqDescription
buildIdstringyesBuild ID
versionIdstringyesApp Store Version ID

No output schema declared.

No examples provided.

apple_cancel_submission ~29

Cancel an in-review submission (if still possible)

NameTypeReqDescription
submissionIdstringyesSubmission ID

No output schema declared.

No examples provided.

apple_create_beta_group ~104

Create a beta group

NameTypeReqDescription
appIdstringyesApp ID
feedbackEnabledbooleanEnable feedback
hasAccessToAllBuildsbooleanAuto-enable all new builds
isInternalGroupbooleanIs internal group (Apple employees)
namestringyesGroup name
publicLinkEnabledbooleanEnable public TestFlight link
publicLinkLimitnumberMax testers via public link

No output schema declared.

No examples provided.

apple_create_bundle_id ~48

Register a new bundle ID

NameTypeReqDescription
identifierstringyesBundle ID (e.g. com.example.app)
namestringyesDisplay name
platformstringyes

No output schema declared.

No examples provided.

apple_create_certificate ~65

Create a certificate

NameTypeReqDescription
certificateTypestringyesCertificate type (e.g. IOS_DEVELOPMENT, IOS_DISTRIBUTION, MAC_APP_DISTRIBUTION, DEVELOPER_ID_APPLICATION)
csrContentstringyesCertificate Signing Request (CSR) content

No output schema declared.

No examples provided.

apple_create_iap ~69

Create an in-app purchase

NameTypeReqDescription
appIdstringyesApp ID
inAppPurchaseTypestringyesIAP type
namestringyesIAP name
productIdstringyesProduct ID (e.g. com.example.app.coins100)

No output schema declared.

No examples provided.

apple_create_profile ~86

Create a provisioning profile

NameTypeReqDescription
bundleIdIdstringyesBundle ID
certificateIdsarrayyesArray of certificate IDs
deviceIdsarrayArray of device IDs (required for development profiles)
namestringyesProfile name
profileTypestringyesProfile type (e.g. IOS_APP_DEVELOPMENT, IOS_APP_STORE)

No output schema declared.

No examples provided.

apple_create_screenshot_set ~74

Create a screenshot set for a specific display type

NameTypeReqDescription
displayTypestringyesDisplay type (e.g. APP_IPHONE_67, APP_IPHONE_65, APP_IPAD_PRO_129, APP_IPAD_PRO_3GEN_129)
localizationIdstringyesVersion Localization ID

No output schema declared.

No examples provided.

apple_create_subscription_group ~35

Create a subscription group

NameTypeReqDescription
appIdstringyesApp ID
referenceNamestringyesReference name

No output schema declared.

No examples provided.

apple_create_version ~86

Create a new App Store version for submission

NameTypeReqDescription
appIdstringyesApp ID
copyrightstring
earliestReleaseDatestringISO 8601 date for scheduled release
platformstring
releaseTypestring
versionStringstringyesVersion (e.g. 1.0.0)

No output schema declared.

No examples provided.

apple_create_version_localization ~100

Create a new localization for a version

NameTypeReqDescription
descriptionstring
keywordsstringComma-separated keywords
localestringyesLocale code (e.g. ko, en-US, ja)
marketingUrlstring
promotionalTextstring
supportUrlstring
versionIdstringyesApp Store Version ID
whatsNewstring

No output schema declared.

No examples provided.

apple_delete_beta_group ~27

Delete a beta group

NameTypeReqDescription
betaGroupIdstringyesBeta Group ID

No output schema declared.

No examples provided.

apple_delete_beta_tester ~28

Delete a beta tester

NameTypeReqDescription
betaTesterIdstringyesBeta Tester ID

No output schema declared.

No examples provided.

apple_delete_iap ~29

Delete an in-app purchase

NameTypeReqDescription
iapIdstringyesIn-App Purchase ID

No output schema declared.

No examples provided.

apple_delete_profile ~24

Delete a provisioning profile

NameTypeReqDescription
profileIdstringyesProfile ID

No output schema declared.

No examples provided.

apple_delete_screenshot ~24

Delete a screenshot

NameTypeReqDescription
screenshotIdstringyesScreenshot ID

No output schema declared.

No examples provided.

apple_delete_subscription_group ~26

Delete a subscription group

NameTypeReqDescription
groupIdstringyesSubscription Group ID

No output schema declared.

No examples provided.

apple_disable_capability ~30

Disable a capability on a bundle ID

NameTypeReqDescription
capabilityIdstringyesBundle ID Capability ID

No output schema declared.

No examples provided.

apple_enable_capability ~170

Enable a capability on a bundle ID

NameTypeReqDescription
bundleIdIdstringyesBundle ID
capabilityTypestringyesCapability type (e.g. ICLOUD, PUSH_NOTIFICATIONS, IN_APP_PURCHASE, GAME_CENTER, WALLET, MAPS, ASSOCIATED_DOMAINS, PERSONAL_VPN, APP_GROUPS, HEALTHKIT, HOMEKIT, WIRELESS_ACCESSORY_CONFIGURATION, APPLE…
settingsarrayCapability-specific settings

No output schema declared.

No examples provided.

apple_get_age_rating ~31

Get age rating declaration for an app info

NameTypeReqDescription
appInfoIdstringyesAppInfo ID

No output schema declared.

No examples provided.

apple_get_app ~30

Get detailed info about an app including latest version state

NameTypeReqDescription
appIdstringyesApp ID

No output schema declared.

No examples provided.

apple_get_app_info ~31

Get app info (categories, age rating, etc)

NameTypeReqDescription
appIdstringyesApp ID

No output schema declared.

No examples provided.

apple_get_iap ~29

Get in-app purchase details

NameTypeReqDescription
iapIdstringyesIn-App Purchase ID

No output schema declared.

No examples provided.

apple_get_pricing ~25

Get current app pricing

NameTypeReqDescription
appIdstringyesApp ID

No output schema declared.

No examples provided.

apple_invite_beta_tester ~60

Invite a beta tester

NameTypeReqDescription
betaGroupIdsarrayyesArray of beta group IDs
emailstringyesTester email
firstNamestringFirst name
lastNamestringLast name

No output schema declared.

No examples provided.

apple_list_app_info_localizations ~39

List app info localizations (app name, subtitle, privacy policy URL)

NameTypeReqDescription
appInfoIdstringyesAppInfo ID

No output schema declared.

No examples provided.

apple_list_apps ~30

List all apps in App Store Connect

NameTypeReqDescription
limitnumberMax results (default 100)

No output schema declared.

No examples provided.

apple_list_availability ~28

List territories where the app is available

NameTypeReqDescription
appIdstringyesApp ID

No output schema declared.

No examples provided.

apple_list_beta_groups ~26

List beta groups

NameTypeReqDescription
appIdstringFilter by app ID

No output schema declared.

No examples provided.

apple_list_beta_testers ~37

List beta testers

NameTypeReqDescription
appIdstringFilter by app ID
emailstringFilter by email

No output schema declared.

No examples provided.

apple_list_builds ~48

List builds uploaded to App Store Connect

NameTypeReqDescription
appIdstringyesApp ID
limitnumber
preReleaseVersionstringFilter by version string

No output schema declared.

No examples provided.

apple_list_bundle_id_capabilities ~30

List capabilities for a bundle ID

NameTypeReqDescription
bundleIdIdstringyesBundle ID

No output schema declared.

No examples provided.

apple_list_bundle_ids ~22

List registered bundle IDs

NameTypeReqDescription
limitnumber

No output schema declared.

No examples provided.

apple_list_certificates ~80

List certificates

NameTypeReqDescription
certificateTypestringFilter by certificate type (e.g. IOS_DEVELOPMENT, IOS_DISTRIBUTION, MAC_APP_DISTRIBUTION, MAC_INSTALLER_DISTRIBUTION, MAC_APP_DEVELOPMENT, DEVELOPER_ID_KEXT, DEVELOPER_ID_APPLICATION, DEVELOPER_ID_IN…

No output schema declared.

No examples provided.

apple_list_devices ~33

List registered devices

NameTypeReqDescription
platformstringFilter by platform
statusstringFilter by status

No output schema declared.

No examples provided.

apple_list_iap ~28

List in-app purchases for an app

NameTypeReqDescription
appIdstringyesApp ID

No output schema declared.

No examples provided.

apple_list_profiles ~122

List provisioning profiles

NameTypeReqDescription
namestringFilter by profile name
profileTypestringFilter by profile type (e.g. IOS_APP_DEVELOPMENT, IOS_APP_STORE, IOS_APP_ADHOC, IOS_APP_INHOUSE, MAC_APP_DEVELOPMENT, MAC_APP_STORE, MAC_APP_DIRECT, TVOS_APP_DEVELOPMENT, TVOS_APP_STORE, TVOS_APP_ADH…

No output schema declared.

No examples provided.

apple_list_reviews ~40

List customer reviews for an app

NameTypeReqDescription
appIdstringyesApp ID
limitnumber
sortstring

No output schema declared.

No examples provided.

apple_list_screenshot_sets ~29

List screenshot sets for a localization

NameTypeReqDescription
localizationIdstringyesVersion Localization ID

No output schema declared.

No examples provided.

apple_list_subscription_groups ~27

List subscription groups for an app

NameTypeReqDescription
appIdstringyesApp ID

No output schema declared.

No examples provided.

apple_list_version_localizations ~31

List all localizations for a version

NameTypeReqDescription
versionIdstringyesApp Store Version ID

No output schema declared.

No examples provided.

apple_list_versions ~60

List all App Store versions for an app

NameTypeReqDescription
appIdstringyesApp ID
platformstring
statestringFilter by state (e.g. PREPARE_FOR_SUBMISSION, READY_FOR_SALE)

No output schema declared.

No examples provided.

apple_register_device ~42

Register a new device

NameTypeReqDescription
namestringyesDevice name
platformstringyesPlatform
udidstringyesDevice UDID

No output schema declared.

No examples provided.

apple_remove_beta_testers_from_group ~46

Remove beta testers from a group

NameTypeReqDescription
betaGroupIdstringyesBeta Group ID
betaTesterIdsarrayyesArray of beta tester IDs

No output schema declared.

No examples provided.

apple_respond_to_review ~38

Respond to a customer review

NameTypeReqDescription
responseBodystringyesResponse text
reviewIdstringyesCustomer Review ID

No output schema declared.

No examples provided.

apple_revoke_certificate ~25

Revoke a certificate

NameTypeReqDescription
certificateIdstringyesCertificate ID

No output schema declared.

No examples provided.

apple_set_price ~69

Set app price (free or paid). Use price tier ID from Apple price points.

NameTypeReqDescription
appIdstringyesApp ID
priceTierIdstringyesPrice tier ID (use "0" for free)
startDatestringISO 8601 start date

No output schema declared.

No examples provided.

apple_submit_for_review ~30

Submit an App Store version for review

NameTypeReqDescription
versionIdstringyesApp Store Version ID

No output schema declared.

No examples provided.

apple_update_age_rating ~135

Update age rating declaration

NameTypeReqDescription
ageRatingIdstringyesAge Rating Declaration ID
alcoholTobaccoOrDrugUseOrReferencesstring
gamblingAndContestsboolean
gamblingSimulatedstring
horrorOrFearThemesstring
medicalOrTreatmentInformationstring
profanityOrCrudeHumorstring
sexualContentOrNuditystring
unrestrictedWebAccessboolean
violenceCartoonOrFantasystring
violenceRealisticstring

No output schema declared.

No examples provided.