io.github.muhammetali/gpc-mcp-server
NPM · GPC-MCP-SERVER · SCANNED SEP 20
Google Play Console MCP Server for AI coding agents
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security89
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects uuid 9.0.1, reached via google-auth-library > gaxios > uuid. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 40 of 118 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 11 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability77
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 4477 tokens (~68/item across 65 items; 65 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management57
- Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 9 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "gpc_delete_image" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 65 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.muhammetali/gpc-mcp-server server?
io.github.muhammetali/gpc-mcp-server runs locally as an npm package, launched with npx -y gpc-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · gpc-mcp-server
claude mcp add muhammetali-gpc-mcp-server -- npx -y gpc-mcp-server
{
"mcpServers": {
"muhammetali-gpc-mcp-server": {
"command": "npx",
"args": [
"-y",
"gpc-mcp-server"
]
}
}
} {
"servers": {
"muhammetali-gpc-mcp-server": {
"command": "npx",
"args": [
"-y",
"gpc-mcp-server"
]
}
}
} codex mcp add muhammetali-gpc-mcp-server -- npx -y gpc-mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"muhammetali-gpc-mcp-server": {
"type": "local",
"command": [
"npx",
"-y",
"gpc-mcp-server"
],
"enabled": true
}
}
} openclaw mcp add muhammetali-gpc-mcp-server --command npx --arg -y --arg gpc-mcp-server
mcp_servers:
muhammetali-gpc-mcp-server:
command: "npx"
args: ["-y", "gpc-mcp-server"] {
"McpServers": {
"muhammetali-gpc-mcp-server": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"gpc-mcp-server"
]
}
}
} assistant mcp add muhammetali-gpc-mcp-server -t stdio -c npx -a -y gpc-mcp-server
{
"mcpServers": {
"muhammetali-gpc-mcp-server": {
"command": "npx",
"args": [
"-y",
"gpc-mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +4
- Stability: unverified → 0.27 ▲ functional
- 4 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 3 Sept 26 51
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/gpc-mcp-server@1.0.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-w5hq-g745-h8pq | CVE-2026-41907 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 118 packages
| Packages resolved | 118 |
|---|---|
| Deprecated | 1 |
| Stale | 39 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
gpc_acknowledge_purchase ~51
Acknowledge a product purchase. Must be done within 3 days or the purchase is refunded.
| Name | Type | Req | Description |
|---|---|---|---|
| productId | string | yes | Product ID |
| token | string | yes | Purchase token |
No output schema declared.
No examples provided.
gpc_acquisition_report ~56
Get install/acquisition statistics for a date range. Shows store acquisitions and listing visitors.
| Name | Type | Req | Description |
|---|---|---|---|
| endDate | string | yes | End date (YYYY-MM-DD) |
| startDate | string | yes | Start date (YYYY-MM-DD) |
No output schema declared.
No examples provided.
gpc_activate_base_plan ~50
Activate a subscription base plan. New users can subscribe to this plan.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID to activate |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_activate_offer ~56
Activate a subscription offer, making it available to users.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID |
| offerId | string | yes | Offer ID to activate |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_cancel_recovery ~39
Cancel an active recovery action. Users will no longer receive the recovery notification.
| Name | Type | Req | Description |
|---|---|---|---|
| recoveryId | string | yes | Recovery action ID to cancel |
No output schema declared.
No examples provided.
gpc_cancel_subscription_purchase ~35
Cancel a subscription. User retains access until end of current billing period.
| Name | Type | Req | Description |
|---|---|---|---|
| token | string | yes | Subscription purchase token |
No output schema declared.
No examples provided.
gpc_consume_purchase ~48
Consume a product purchase, allowing the user to buy it again (for consumable items).
| Name | Type | Req | Description |
|---|---|---|---|
| productId | string | yes | Product ID |
| token | string | yes | Purchase token |
No output schema declared.
No examples provided.
gpc_convert_region_prices ~70
Convert a base price to localized prices for all regions. Useful for setting up multi-region pricing.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | yes | Base currency code (e.g., "USD") |
| priceMicros | string | yes | Base price in micros (1,000,000 = $1.00) |
No output schema declared.
No examples provided.
gpc_crash_anomaly_detector ~40
Automatically analyze crash rates over the last 14 days and detect if there is a sudden spike in crashes. Useful for monitoring release health.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_crash_report ~64
Get App Crash and ANR rates from Android Vitals over a date range. Compares against Play Store bad behavior thresholds.
| Name | Type | Req | Description |
|---|---|---|---|
| endDate | string | yes | End date (YYYY-MM-DD) |
| startDate | string | yes | Start date (YYYY-MM-DD) |
No output schema declared.
No examples provided.
gpc_create_offer ~93
Create a promotional offer for a subscription plan (free trial, discounted period, etc.).
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID |
| offerId | string | yes | Unique offer ID |
| offerTags | array | – | Tags for offer targeting |
| phases | array | yes | Offer phases (e.g., free trial then discounted then base price) |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_create_product ~228
Create a new in-app product (one-time product). Price is in micros (e.g., "990000" = $0.99) and is only set for the given region — call gpc_update_product with a different regionCode to add pricing for other regions.
| Name | Type | Req | Description |
|---|---|---|---|
| consumable | boolean | yes | true = can be purchased repeatedly (e.g. gold packs); false = one-time/non-consumable |
| currency | string | yes | Currency code matching regionCode (e.g., "USD" for US, "TRY" for TR) |
| defaultLanguage | string | yes | Default language code (e.g., "en-US") |
| description | string | yes | Product description |
| priceMicros | string | yes | Price in micros (1,000,000 = $1.00). E.g., "990000" for $0.99 |
| productId | string | yes | Unique product ID |
| regionCode | string | yes | ISO region code for the initial price (e.g., "US", "TR") |
| title | string | yes | Product title |
No output schema declared.
No examples provided.
gpc_create_recovery ~72
Create a draft app recovery action targeting specific users. Must be deployed separately.
| Name | Type | Req | Description |
|---|---|---|---|
| targetAllUsers | boolean | – | Target all users |
| targetRegions | array | – | Target specific region codes (e.g., ["US", "TR"]) |
| targetVersionCodes | array | – | Target specific version codes |
No output schema declared.
No examples provided.
gpc_create_release ~203
Create a new release on a track. Specify version code, release notes, and optionally staged rollout percentage.
| Name | Type | Req | Description |
|---|---|---|---|
| autoFillLocales | boolean | – | Auto-fill missing locale release notes from en-US (default: true) |
| releaseName | string | – | Release name (e.g., "2.1.0-rc1") |
| releaseNotes | object | yes | Object of locale -> release notes. E.g., {"en-US": "Bug fixes", "tr-TR": "Hata duzeltmeleri"} |
| status | string | – | Release status: draft, inProgress (staged rollout), or completed (full rollout) |
| track | string | yes | Release track (internal, alpha, beta, production) |
| userFraction | number | – | Rollout fraction (0.01-1.0). Only used when status is inProgress. |
| versionCode | string | yes | Version code of the AAB/APK already uploaded to Google Play |
No output schema declared.
No examples provided.
gpc_create_subscription ~136
Create a new subscription product with a base plan.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID (e.g., "monthly", "yearly") |
| benefits | array | – | List of subscription benefits shown to users |
| billingPeriod | string | yes | ISO 8601 billing period (P1M = monthly, P1Y = yearly, P1W = weekly) |
| defaultLanguage | string | yes | Default language code (e.g., "en-US") |
| description | string | – | Subscription description |
| productId | string | yes | Unique subscription product ID |
| title | string | yes | Subscription title |
No output schema declared.
No examples provided.
gpc_deactivate_base_plan ~54
Deactivate a subscription base plan. Existing subscribers keep access; new users cannot subscribe.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID to deactivate |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_deactivate_offer ~64
Deactivate a subscription offer. New users cannot redeem it; existing users are not affected.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID |
| offerId | string | yes | Offer ID to deactivate |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_defer_subscription_billing ~75
Defer subscription billing to a future date. User keeps access without being charged.
| Name | Type | Req | Description |
|---|---|---|---|
| desiredExpiryTime | string | yes | New expiry time in RFC 3339 format (e.g., "2026-06-01T00:00:00Z") |
| token | string | yes | Subscription purchase token |
No output schema declared.
No examples provided.
gpc_delete_all_images ~100
Delete all images of a specific type for a locale (bulk delete).
| Name | Type | Req | Description |
|---|---|---|---|
| imageType | string | yes | Image type (phoneScreenshots, sevenInchScreenshots, tenInchScreenshots, tvScreenshots, wearScreenshots, icon, featureGraphic, tvBanner) |
| language | string | yes | Locale code (en-US, tr-TR, de-DE, es-419, fr-FR, ru-RU, ar) |
No output schema declared.
No examples provided.
gpc_delete_base_plan ~47
Delete a subscription base plan permanently. Cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID to delete |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_delete_image ~114
Delete a single image by ID from a locale and image type.
| Name | Type | Req | Description |
|---|---|---|---|
| imageId | string | yes | Image ID (from gpc_list_images) |
| imageType | string | yes | Image type (phoneScreenshots, sevenInchScreenshots, tenInchScreenshots, tvScreenshots, wearScreenshots, icon, featureGraphic, tvBanner) |
| language | string | yes | Locale code (en-US, tr-TR, de-DE, es-419, fr-FR, ru-RU, ar) |
No output schema declared.
No examples provided.
gpc_delete_listing ~52
Delete a store listing for a specific locale.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | yes | Locale code (en-US, tr-TR, de-DE, es-419, fr-FR, ru-RU, ar) |
No output schema declared.
No examples provided.
gpc_delete_offer ~51
Delete a subscription offer permanently.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID |
| offerId | string | yes | Offer ID to delete |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_delete_product ~37
Delete an in-app product by product ID. This action cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| productId | string | yes | Product ID to delete |
No output schema declared.
No examples provided.
gpc_deploy_recovery ~49
Deploy (activate) a draft recovery action. Targeted users will receive the recovery notification.
| Name | Type | Req | Description |
|---|---|---|---|
| recoveryId | string | yes | Recovery action ID (from gpc_list_recovery_actions) |
No output schema declared.
No examples provided.
gpc_get_app_info ~29
Get app details (package name, default language, contact info) from Google Play Console.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_get_offer ~52
Get detailed information about a specific subscription offer.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID |
| offerId | string | yes | Offer ID |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_get_product ~48
Get detailed information about a specific in-app product by product ID, including all localized listings and per-region prices.
| Name | Type | Req | Description |
|---|---|---|---|
| productId | string | yes | Product ID (from gpc_list_products) |
No output schema declared.
No examples provided.
gpc_get_subscription ~30
Get detailed information about a specific subscription product.
| Name | Type | Req | Description |
|---|---|---|---|
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_get_subscription_purchase ~41
Get subscription purchase status by token. Shows state, line items, renewal info.
| Name | Type | Req | Description |
|---|---|---|---|
| token | string | yes | Subscription purchase token from the client app |
No output schema declared.
No examples provided.
gpc_halt_rollout ~47
Halt (pause) an ongoing staged rollout. The release stays in halted state until resumed.
| Name | Type | Req | Description |
|---|---|---|---|
| track | string | – | Release track (internal, alpha, beta, production) |
No output schema declared.
No examples provided.
gpc_list_apks ~21
List all uploaded APKs with their version codes.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_list_bundles ~29
List all uploaded bundles with their version codes. Useful to verify uploads before creating releases.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_list_countries ~44
List country availability for a specific track. Shows which countries can access the release.
| Name | Type | Req | Description |
|---|---|---|---|
| track | string | yes | Release track (internal, alpha, beta, production) |
No output schema declared.
No examples provided.
gpc_list_generated_apks ~46
List generated split APKs for a version code. Useful for QA and device-specific debugging.
| Name | Type | Req | Description |
|---|---|---|---|
| versionCode | number | yes | Version code to list generated APKs for |
No output schema declared.
No examples provided.
gpc_list_images ~104
List uploaded images (screenshots, feature graphic, icon) for a locale and image type.
| Name | Type | Req | Description |
|---|---|---|---|
| imageType | string | yes | Image type (phoneScreenshots, sevenInchScreenshots, tenInchScreenshots, tvScreenshots, wearScreenshots, icon, featureGraphic, tvBanner) |
| language | string | yes | Locale code (en-US, tr-TR, de-DE, es-419, fr-FR, ru-RU, ar) |
No output schema declared.
No examples provided.
gpc_list_listings ~31
List all store listings across locales (title, description, short description). Warns about missing locales.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_list_offers ~44
List all promotional offers for a subscription base plan.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_list_products ~37
List all in-app products (one-time products via the monetization.onetimeproducts API) with product ID, price, and state.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_list_recovery_actions ~30
List all app recovery actions (draft, active, canceled). Used for emergency incident response.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_list_reviews ~72
List recent user reviews with ratings, comments, and reply status. Highlights unreplied low-rating reviews.
| Name | Type | Req | Description |
|---|---|---|---|
| maxResults | number | – | Number of reviews to fetch (max 100) |
| translationLanguage | string | – | Translate reviews to this language (BCP 47 code, e.g., "en") |
No output schema declared.
No examples provided.
gpc_list_subscriptions ~25
List all subscriptions with their base plans, billing periods, and listings.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_list_testers ~40
List testers (Google Groups) configured for a specific track.
| Name | Type | Req | Description |
|---|---|---|---|
| track | string | yes | Release track (internal, alpha, beta, production) |
No output schema declared.
No examples provided.
gpc_list_tracks ~33
List all tracks (internal, alpha, beta, production) with their releases, version codes, and rollout status.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gpc_list_voided_purchases ~94
List voided purchases (refunds, chargebacks, fraud). Critical for fraud detection and financial reconciliation.
| Name | Type | Req | Description |
|---|---|---|---|
| endTime | string | – | End time in milliseconds since epoch |
| maxResults | number | – | Maximum results to return |
| startTime | string | – | Start time in milliseconds since epoch |
| type | number | – | Filter by type: 0=products, 1=subscriptions |
No output schema declared.
No examples provided.
gpc_migrate_base_plan_prices ~81
Migrate existing subscribers to a new price. Subscribers are notified per Google Play policies.
| Name | Type | Req | Description |
|---|---|---|---|
| basePlanId | string | yes | Base plan ID |
| currency | string | yes | Currency code (e.g., "USD") |
| priceMicros | string | yes | New price in micros |
| productId | string | yes | Subscription product ID |
No output schema declared.
No examples provided.
gpc_promote_release ~120
Promote a release from one track to another (e.g., internal → beta → production). Copies the latest release with its version codes and release notes.
| Name | Type | Req | Description |
|---|---|---|---|
| fromTrack | string | yes | Source track to promote from |
| releaseNotes | object | – | Override release notes (locale -> text). If omitted, copies from source track. |
| status | string | – | Release status on destination track |
| toTrack | string | yes | Destination track to promote to |
| userFraction | number | – | Staged rollout fraction (only for inProgress status) |
No output schema declared.
No examples provided.
gpc_refund_order ~63
Issue a full refund for an order. The refund may take a few minutes to process.
| Name | Type | Req | Description |
|---|---|---|---|
| fullRefund | boolean | – | Whether to issue a full refund |
| orderId | string | yes | Order ID (e.g., from purchase verification or Play Console) |
No output schema declared.
No examples provided.
gpc_release_history ~67
View detailed release history for a specific track. Shows version codes, statuses, rollout percentages, and release notes.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Maximum number of releases to show (default: 10) |
| track | string | yes | Release track (internal, alpha, beta, production) |
No output schema declared.
No examples provided.
gpc_reply_review ~58
Reply to a user review. Use to respond to feedback, report issues, or thank users.
| Name | Type | Req | Description |
|---|---|---|---|
| replyText | string | yes | Reply text to the reviewer |
| reviewId | string | yes | Review ID (from gpc_list_reviews) |
No output schema declared.
No examples provided.
What is the io.github.muhammetali/gpc-mcp-server server?
io.github.muhammetali/gpc-mcp-server is listed in the public MCP registry as io.github.muhammetali/gpc-mcp-server. Google Play Console MCP Server for AI coding agents. This page covers its npm package (gpc-mcp-server).
Is the io.github.muhammetali/gpc-mcp-server server safe to use?
io.github.muhammetali/gpc-mcp-server scores 74 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.muhammetali/gpc-mcp-server server expose?
io.github.muhammetali/gpc-mcp-server exposes 65 tools: gpc_get_app_info, gpc_list_listings, gpc_update_listing, gpc_list_tracks, gpc_create_release, and 60 more. Their descriptions and schemas cost roughly 4,477 tokens of context every time the server is loaded.
Is the io.github.muhammetali/gpc-mcp-server server still maintained?
io.github.muhammetali/gpc-mcp-server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.muhammetali/gpc-mcp-server server under?
io.github.muhammetali/gpc-mcp-server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.