App Store Connect MCP
Overview
Description from the maker (original English)
App Store Connect MCP: apps, TestFlight, reviews, sales reports, and team users.
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
- UsageiVery new↓ 318/wk · ★ –
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs on your computer
- Transport: stdio
- Category: Marketing & social media
- You need to fill in: APP_STORE_CONNECT_KEY_ID, APP_STORE_CONNECT_ISSUER_ID, APP_STORE_CONNECT_PRIVATE_KEY_PATH, APP_STORE_CONNECT_PRIVATE_KEY
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 1 of 1 passed
- Runs on your computer with your user’s permissions (files, network, apps).
- You fill in yourself:
APP_STORE_CONNECT_KEY_ID,APP_STORE_CONNECT_ISSUER_ID,APP_STORE_CONNECT_PRIVATE_KEY_PATH,APP_STORE_CONNECT_PRIVATE_KEY
Values marked secret are keys to your account. Never share them or paste them into a chat.
You need
- npmNode.js installed (for the npx command)
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"app-store-connect": {
"command": "npx",
"args": [
"-y",
"@chrischall/app-store-connect-mcp"
],
"env": {
"APP_STORE_CONNECT_KEY_ID": "your-value",
"APP_STORE_CONNECT_ISSUER_ID": "your-value",
"APP_STORE_CONNECT_PRIVATE_KEY_PATH": "your-value",
"APP_STORE_CONNECT_PRIVATE_KEY": "your-value"
}
}
}
}Run this in your terminal
claude mcp add app-store-connect --env APP_STORE_CONNECT_KEY_ID=your-value --env APP_STORE_CONNECT_ISSUER_ID=your-value --env APP_STORE_CONNECT_PRIVATE_KEY_PATH=your-value --env APP_STORE_CONNECT_PRIVATE_KEY=your-value -- npx -y @chrischall/app-store-connect-mcpFill in the empty values before running it.
Or copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"app-store-connect": {
"command": "npx",
"args": [
"-y",
"@chrischall/app-store-connect-mcp"
],
"env": {
"APP_STORE_CONNECT_KEY_ID": "your-value",
"APP_STORE_CONNECT_ISSUER_ID": "your-value",
"APP_STORE_CONNECT_PRIVATE_KEY_PATH": "your-value",
"APP_STORE_CONNECT_PRIVATE_KEY": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"app-store-connect": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@chrischall/app-store-connect-mcp"
],
"env": {
"APP_STORE_CONNECT_KEY_ID": "your-value",
"APP_STORE_CONNECT_ISSUER_ID": "your-value",
"APP_STORE_CONNECT_PRIVATE_KEY_PATH": "your-value",
"APP_STORE_CONNECT_PRIVATE_KEY": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
Values you fill in
- 10-character App Store Connect API Key ID (e.g. ABC1234567).
- Team Issuer ID (UUID) from App Store Connect → Users and Access → Integrations.
- Absolute path to your downloaded .p8 private key file. Either this or APP_STORE_CONNECT_PRIVATE_KEY is required.
- PEM contents of your .p8 private key. Either this or APP_STORE_CONNECT_PRIVATE_KEY_PATH is required.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
What it can do
Runs on your computer; the tool list appears in your AI app after you install it.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 9, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account chrischall, which owns the repo
- … Not checked yet
Still maintained
We have not read this repo from GitHub yet
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- – Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
- – Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
- … Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints
Compared with others in Marketing & social mediai
- More stars than 0% of the other 3623 servers in this category
- Published to the registry more recently than 87% of the other 3623 servers in this category
- Basic checks equal to or better than 100% of the other 3623 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is App Store Connect MCP safe?
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
You need to fill in: APP_STORE_CONNECT_KEY_ID, APP_STORE_CONNECT_ISSUER_ID, APP_STORE_CONNECT_PRIVATE_KEY_PATH, APP_STORE_CONNECT_PRIVATE_KEY
Does it run on my computer or in the cloud?
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
Is it still maintained?
The GitHub repo last changed –, and the latest version (1.4.0) reached the registry 4 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.
What can I use instead?
In the same category: MCP YouTube Transcript, Google Analytics MCP, BibiGPT YouTube Video Summarizer
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Google Analytics MCP
GA4 MCP server for AI agents: schema discovery, server-side aggregation, analysis-ready defaults.
BibiGPT YouTube Video Summarizer
AI video summarizer: summarize and transcribe YouTube, Bilibili, TikTok and podcast videos.
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
App Store Connect MCP
A Model Context Protocol server that connects Claude to App Store Connect, giving you natural-language access to your apps, builds, TestFlight beta groups and testers, customer reviews, sales/finance reports, and team users.
[!WARNING]
AI-developed project. This codebase was entirely built and is actively maintained by Claude Code. No human has audited the implementation. Review all code and tool permissions before use.
What you can do
Ask Claude things like:
- *"List my apps"*
- *"Show me the latest builds for app 1234567890"*
- *"Who hasn't accepted their TestFlight invitation?"*
- *"Invite alex@example.com to the External Beta group"*
- *"Submit build 9876 for beta review"*
- *"What's our average rating in Japan this month?"*
- *"Respond to that 1-star review with an apology"*
- *"Pull yesterday's daily sales report for vendor 80012345"*
- *"Invite a new developer with App Manager role"*
Requirements
- Claude Desktop or Claude Code
- Node.js 22 or later
- An App Store Connect API key (
.p8file, Key ID, and Issuer ID) — admin or higher access required to create
Installation
Option A — npm
npx -y @chrischall/app-store-connect-mcp
Add to your Claude config (.mcp.json or Claude Desktop config):
{
"mcpServers": { "app-store-connect": { "command": "npx", "args": ["-y", "@chrischall/app-store-connect-mcp"], "env": { "APP_STORE_CONNECT_KEY_ID": "ABC1234567", "APP_STORE_CONNECT_ISSUER_ID": "57246542-96fe-1a63-e053-0824d011072a", "APP_STORE_CONNECT_PRIVATE_KEY_PATH": "/absolute/path/to/AuthKey_ABC1234567.p8" } } } }
Option B — from source
git clone https://github.com/chrischall/app-store-connect-mcp.git
cd app-store-connect-mcp npm install npm run build
Add to Claude Desktop config:
- Mac:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": { "app-store-connect": { "command": "node", "args": ["/absolute/path/to/app-store-connect-mcp/dist/bundle.js"], "env": { "APP_STORE_CONNECT_KEY_ID": "ABC1234567", "APP_STORE_CONNECT_ISSUER_ID": "57246542-96fe-1a63-e053-0824d011072a", "APP_STORE_CONNECT_PRIVATE_KEY_PATH": "/absolute/path/to/AuthKey_ABC1234567.p8" } } } }
Getting an API key
- Sign in at App Store Connect → Users and Access → Integrations → App Store Connect API.
- Click + to generate a key. Pick a role appropriate to what you want Claude to do —
Developeris enough for read-only browsing;App Managerfor TestFlight management;Adminfor user invites and most write operations. - Download the
.p8file (you can only download it once) and note the Key ID and Issuer ID. - Either point
APP_STORE_CONNECT_PRIVATE_KEY_PATHat the saved.p8, or paste the PEM contents intoAPP_STORE_CONNECT_PRIVATE_KEY(newline-escaped is fine).
The key signs short-lived (20-minute) ES256 JWTs on demand. No external token storage; nothing is sent to anyone but Apple.
Tools
| Tool | What it does |
|---|---|
list_apps | List apps in your account (filter by bundleId/name) |
get_app | Get a single app by ID |
list_app_store_versions | List App Store releases for an app |
get_app_infos | Age rating and store-state info for an app |
list_builds | Recent builds (newest first), filter by app/state/version |
get_build | Single build details |
list_beta_groups | TestFlight internal/external beta groups |
list_beta_testers | Beta testers, filter by app/group/email |
invite_beta_tester | Add a new tester, optionally to groups/builds |
delete_beta_tester | Remove a tester from your team |
add_testers_to_beta_group | Add existing testers to a group |
remove_testers_from_beta_group | Remove testers from a group |
submit_build_for_beta_review | Send a build for TestFlight beta review |
list_customer_reviews | App Store reviews, filter by rating/territory |
get_customer_review | Single review with developer response |
respond_to_review | Post or update a developer reply |
download_sales_report | Daily/weekly/monthly/yearly units & sales TSV |
download_finance_report | Region finance/proceeds TSV; Total_* trailer lines in a separate summary |
list_users | App Store Connect team users |
list_user_invitations | Pending team invitations |
invite_user | Invite a new team member with roles; app visibility is explicit (allAppsVisible: true or a non-empty visibleAppIds, no all-apps default) |
asc_healthcheck | Verify credentials and upstream reachability; reports failures as data, not exceptions |
Environment
| Variable | Required | Notes |
|---|---|---|
APP_STORE_CONNECT_KEY_ID | yes | 10-character Key ID (e.g. ABC1234567) |
APP_STORE_CONNECT_ISSUER_ID | yes | Team Issuer ID (UUID) |
APP_STORE_CONNECT_PRIVATE_KEY | one of | Full PEM contents of your .p8. Newline-escapes (\n) are accepted. |
APP_STORE_CONNECT_PRIVATE_KEY_PATH | one of | Absolute path to the .p8 file |
Confirmations
Every write (invite_beta_tester, delete_beta_tester, add_testers_to_beta_group, remove_testers_from_beta_group, submit_build_for_beta_review, respond_to_review, invite_user) asks you to confirm before anything is sent. A client that can show a confirmation prompt (Claude Code) shows one with the exact request. On a client that cannot, the first call sends nothing and returns a preview — method, path and the JSON body it will send — plus a confirmToken; only a repeat call with the same arguments and that token performs the write. A token is single-use, expires, and is refused if any argument changed since the preview.
| variable | default | |
|---|---|---|
MCP_CONFIRM_MODE | ask-user | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). ask-user: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. auto: the same two steps, but the model may use the token after reviewing the preview itself. refuse: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless MCP_CONFIRM_ELICITATION=off. An unrecognised value is treated as refuse. |
MCP_CONFIRM_ELICITATION | on | off never sends a confirmation prompt, so every client gets the MCP_CONFIRM_MODE path. Set it for a client that declares it can show prompts but never does (the gated call hangs — opencode 2.0.x). Any other value stays on, with a stderr warning. |
MCP_CONFIRM_TTL_SECONDS | 600 | How long a token stays valid. |
MCP_CONFIRM_SECRET | random per process | Signing key; set it only if tokens must survive a server restart. |
Development
npm install
npm test # vitest run npm run test:watch # watch mode npm run build # tsc + esbuild bundle npm run dev # node --env-file=.env dist/index.js
Tests mock client.request / client.requestRaw; no real App Store Connect calls are made.
License
MIT