io.github.mikusnuz/app-publish

Name: io.github.mikusnuz/app-publish · app-publish-mcp
Availability: InStock

NPM · APP-PUBLISH-MCP · SCANNED AUG 3

MCP server for App Store Connect & Google Play Console — iOS/Android app management

Available components

npm · app-publish-mcp 63

+11 this week 63 63 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security79

No malware found by supply-chain analysis.Pass
CVE check failed: a known high-severity CVE affects uuid 9.0.1, reached via google-auth-library > gaxios > uuid. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (129 of 133), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 136 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability79

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 5005 tokens (~53/item across 93 items; 91 tools + 2 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage95

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
84% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · app-publish-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add mikusnuz-app-publish -- npx -y app-publish-mcp

# add to Codex CLI

codex mcp add mikusnuz-app-publish -- npx -y app-publish-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mikusnuz-app-publish": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "app-publish-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add mikusnuz-app-publish --command npx --arg -y --arg app-publish-mcp

# ~/.hermes/config.yaml

mcp_servers:
  mikusnuz-app-publish:
    command: "npx"
    args: ["-y", "app-publish-mcp"]

// mcp.json

{
  "mcpServers": {
    "mikusnuz-app-publish": {
      "command": "npx",
      "args": [
        "-y",
        "app-publish-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +32
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: MIT functional
1 Aug 26 −5
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
31 Jul 26 −23
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
29 Jul 26 +52
- CVE-2026-41907 affects this package: high ▼ security
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Schema quality: unverified → good ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → 100 ▲ functional
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Licence: MIT functional
28 Jul 26 −27
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
27 Jul 26 52

First indexed and scored.

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding

ID	CVE	Severity	Vector	Fix available
GHSA-w5hq-g745-h8pq	CVE-2026-41907	high	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	yes

Dependencies 129 packages

129 packages in the resolved dependency tree · 129 deprecated · 45 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 91 exposed · ~4,961 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

apple_update_app_info_localization ~74

Update app name, subtitle, or privacy policy URL for a locale

Input Output Examples

Name	Type	Req	Description
localizationId	string	yes	AppInfo Localization ID
name	string	—	App name
privacyPolicyText	string	—	—
privacyPolicyUrl	string	—	—
subtitle	string	—	App subtitle

No output schema declared.

No examples provided.

apple_update_category ~59

Update app primary/secondary category

Input Output Examples

Name	Type	Req	Description
appInfoId	string	yes	AppInfo ID
primaryCategoryId	string	—	Primary category ID (e.g. SOCIAL_NETWORKING)
secondaryCategoryId	string	—	Secondary category ID

No output schema declared.

No examples provided.

apple_update_device ~44

Update device name or status

Input Output Examples

Name	Type	Req	Description
deviceId	string	yes	Device ID
name	string	—	New device name
status	string	—	New status

No output schema declared.

No examples provided.

apple_update_review_detail ~109

Update app review info (contact info, notes, demo account for reviewer)

Input Output Examples

Name	Type	Req	Description
contactEmail	string	—	—
contactFirstName	string	—	—
contactLastName	string	—	—
contactPhone	string	—	—
demoAccountName	string	—	—
demoAccountPassword	string	—	—
demoAccountRequired	boolean	—	—
notes	string	—	Notes for the reviewer
versionId	string	yes	App Store Version ID

No output schema declared.

No examples provided.

apple_update_version_localization ~84

Update localization fields (description, keywords, whatsNew, etc)

Input Output Examples

Name	Type	Req	Description
description	string	—	—
keywords	string	—	Comma-separated keywords
localizationId	string	yes	Localization ID
marketingUrl	string	—	—
promotionalText	string	—	—
supportUrl	string	—	—
whatsNew	string	—	—

No output schema declared.

No examples provided.

apple_upload_screenshot ~77

Upload a screenshot (reserves slot, then uploads binary)

Input Output Examples

Name	Type	Req	Description
fileName	string	yes	File name (e.g. screen1.png)
filePath	string	yes	Local path to the screenshot image
fileSize	number	yes	File size in bytes
screenshotSetId	string	yes	Screenshot Set ID

No output schema declared.

No examples provided.

google_archive_subscription ~47

Archive a subscription (remove from Google Play but retain for existing subscribers)

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name
productId	string	yes	Subscription product ID to archive

No output schema declared.

No examples provided.

google_commit_edit ~48

Commit all pending changes in an edit session. This publishes the changes.

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID from google_create_edit
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_create_edit ~44

Create a new edit session. Required before making any changes to a Google Play listing.

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name (e.g. com.example.app)

No output schema declared.

No examples provided.

google_create_iap ~138

Create a new in-app product (managed product)

Input Output Examples

Name	Type	Req	Description
defaultDescription	string	yes	Default product description
defaultLanguage	string	yes	Default language (e.g. en-US)
defaultPriceCurrencyCode	string	yes	Currency code (e.g. USD)
defaultPriceMicros	string	yes	Price in micros (e.g. 990000 for $0.99)
defaultTitle	string	yes	Default product title
packageName	string	yes	Android package name
purchaseType	string	—	—
sku	string	yes	Product SKU (unique identifier)
status	string	—	—

No output schema declared.

No examples provided.

google_create_release ~120

Create a release on a track with optional version codes and release notes

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name
releaseName	string	—	Release name/label
releaseNotes	array	—	Release notes per language
status	string	—	—
track	string	yes	Target track
userFraction	number	—	Staged rollout fraction (0.0-1.0, only for production)
versionCodes	array	—	Version codes to include

No output schema declared.

No examples provided.

google_delete_all_images ~61

Delete all images of a specific type for a language

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
imageType	string	yes	Image type
language	string	yes	Language code
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_delete_edit ~39

Discard an edit session without committing changes

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_delete_iap ~38

Delete an in-app product

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name
sku	string	yes	Product SKU to delete

No output schema declared.

No examples provided.

google_delete_image ~67

Delete a specific uploaded image

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
imageId	string	yes	Image ID to delete
imageType	string	yes	Image type
language	string	yes	Language code
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_delete_listing ~57

Delete a store listing for a specific language

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
language	string	yes	Language code to delete (e.g. ko-KR)
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_get_country_availability ~60

Get country availability for a specific track

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name
track	string	yes	Track name (e.g. production, beta, alpha, internal)

No output schema declared.

No examples provided.

google_get_details ~44

Get app details (default language, contact email/phone/website)

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_get_iap ~39

Get details of a specific in-app product

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name
sku	string	yes	Product SKU

No output schema declared.

No examples provided.

google_get_listing ~61

Get store listing for a specific language

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
language	string	yes	Language code (e.g. ko-KR, en-US, ja-JP)
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_get_review ~37

Get a specific review with details

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name
reviewId	string	yes	Review ID

No output schema declared.

No examples provided.

google_get_subscription ~38

Get details of a specific subscription

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name
productId	string	yes	Subscription product ID

No output schema declared.

No examples provided.

google_get_testers ~56

Get tester configuration for a track

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name
track	string	yes	Track name (e.g. internal, alpha, beta)

No output schema declared.

No examples provided.

google_get_track ~47

Get details of a specific release track

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name
track	string	yes	Track name

No output schema declared.

No examples provided.

google_halt_release ~46

Halt an ongoing staged rollout

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name
track	string	yes	Track name

No output schema declared.

No examples provided.

google_list_iap ~34

List all in-app products (managed products) for an app

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_list_images ~57

List uploaded images of a specific type

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
imageType	string	yes	Image type
language	string	yes	Language code
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_list_listings ~43

List all store listings (all languages) for an app

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_list_reviews ~27

List user reviews for an app

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_list_subscriptions ~28

List all subscriptions for an app

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_list_tracks ~43

List all release tracks (internal, alpha, beta, production)

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_promote_release ~89

Promote a release from one track to another (e.g. beta → production)

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
fromTrack	string	yes	Source track
packageName	string	yes	Android package name
releaseNotes	array	—	—
toTrack	string	yes	Target track
userFraction	number	—	Staged rollout fraction for production

No output schema declared.

No examples provided.

google_reply_to_review ~47

Reply to a user review

Input Output Examples

Name	Type	Req	Description
packageName	string	yes	Android package name
replyText	string	yes	Reply text
reviewId	string	yes	Review ID

No output schema declared.

No examples provided.

google_update_details ~104

Update app details (default language, contact email/phone/website)

Input Output Examples

Name	Type	Req	Description
contactEmail	string	—	User-visible support email
contactPhone	string	—	User-visible support phone number
contactWebsite	string	—	User-visible website URL
defaultLanguage	string	—	Default language code in BCP 47 format (e.g. en-US)
editId	string	yes	Edit ID
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_update_iap ~105

Update an existing in-app product

Input Output Examples

Name	Type	Req	Description
defaultLanguage	string	—	Default language
defaultPriceCurrencyCode	string	—	Currency code
defaultPriceMicros	string	—	Price in micros
description	string	—	Product description (for default language)
packageName	string	yes	Android package name
sku	string	yes	Product SKU
status	string	—	—
title	string	—	Product title (for default language)

No output schema declared.

No examples provided.

google_update_listing ~106

Update store listing for a specific language (title, descriptions)

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
fullDescription	string	—	Full description (max 4000 chars)
language	string	yes	Language code (e.g. ko-KR, en-US)
packageName	string	yes	Android package name
shortDescription	string	—	Short description (max 80 chars)
title	string	—	App title (max 30 chars)

No output schema declared.

No examples provided.

google_update_testers ~71

Update tester Google Groups for a track

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
googleGroups	array	—	List of Google Group email addresses
packageName	string	yes	Android package name
track	string	yes	Track name (e.g. internal, alpha, beta)

No output schema declared.

No examples provided.

google_upload_apk ~51

Upload an APK file

Input Output Examples

Name	Type	Req	Description
apkPath	string	yes	Local path to the .apk file
editId	string	yes	Edit ID
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_upload_bundle ~55

Upload an Android App Bundle (.aab)

Input Output Examples

Name	Type	Req	Description
bundlePath	string	yes	Local path to the .aab file
editId	string	yes	Edit ID
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_upload_image ~77

Upload an image (screenshot, icon, feature graphic, etc)

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID
imagePath	string	yes	Local path to the image file
imageType	string	yes	Image type
language	string	yes	Language code
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

google_validate_edit ~49

Validate an edit session without committing. Useful to check for errors before commit.

Input Output Examples

Name	Type	Req	Description
editId	string	yes	Edit ID from google_create_edit
packageName	string	yes	Android package name

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug

Day	Score
27 Jul	52
28 Jul	25
29 Jul	77
30 Jul	59
31 Jul	36
1 Aug	31
2 Aug	63
3 Aug	63