Listed from the MCP registry; nobody on Odel publishes it.
App Store Connect MCP: apps, TestFlight, reviews, sales reports, and team users.
Runs on your machine from its package; the steps are below.
At most: moves money, runs code or commands, deletes data, or sends messages for you.
Odel charges nothing per call. The publisher may charge for its own service.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y @chrischall/app-store-connect-mcp
MCP client config
{
"mcpServers": {
"app-store-connect": {
"command": "npx",
"args": [
"-y",
"@chrischall/app-store-connect-mcp"
]
}
}
}A Model Context Protocol server that connects Claude to App Store Connect, giving you natural-language access to your apps, builds, TestFlight beta groups and testers, customer reviews, sales/finance reports, and team users.
Warning
AI-developed project. This codebase was entirely built and is actively maintained by Claude Code. No human has audited the implementation. Review all code and tool permissions before use.
Ask Claude things like:
.p8 file, Key ID, and Issuer ID) — admin or higher access required to createnpx -y @chrischall/app-store-connect-mcp
Add to your Claude config (.mcp.json or Claude Desktop config):
{
"mcpServers": {
"app-store-connect": {
"command": "npx",
"args": ["-y", "@chrischall/app-store-connect-mcp"],
"env": {
"APP_STORE_CONNECT_KEY_ID": "ABC1234567",
"APP_STORE_CONNECT_ISSUER_ID": "57246542-96fe-1a63-e053-0824d011072a",
"APP_STORE_CONNECT_PRIVATE_KEY_PATH": "/absolute/path/to/AuthKey_ABC1234567.p8"
}
}
}
}
git clone https://github.com/chrischall/app-store-connect-mcp.git
cd app-store-connect-mcp
npm install
npm run build
Add to Claude Desktop config:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"app-store-connect": {
"command": "node",
"args": ["/absolute/path/to/app-store-connect-mcp/dist/bundle.js"],
"env": {
"APP_STORE_CONNECT_KEY_ID": "ABC1234567",
"APP_STORE_CONNECT_ISSUER_ID": "57246542-96fe-1a63-e053-0824d011072a",
"APP_STORE_CONNECT_PRIVATE_KEY_PATH": "/absolute/path/to/AuthKey_ABC1234567.p8"
}
}
}
}
Developer is enough for read-only browsing; App Manager for TestFlight management; Admin for user invites and most write operations..p8 file (you can only download it once) and note the Key ID and Issuer ID.APP_STORE_CONNECT_PRIVATE_KEY_PATH at the saved .p8, or paste the PEM contents into APP_STORE_CONNECT_PRIVATE_KEY (newline-escaped is fine).The key signs short-lived (20-minute) ES256 JWTs on demand. No external token storage; nothing is sent to anyone but Apple.
| Tool | What it does |
|---|---|
list_apps | List apps in your account (filter by bundleId/name) |
get_app | Get a single app by ID |
list_app_store_versions | List App Store releases for an app |
get_app_infos | Age rating and store-state info for an app |
list_builds | Recent builds (newest first), filter by app/state/version |
get_build | Single build details |
list_beta_groups | TestFlight internal/external beta groups |
list_beta_testers | Beta testers, filter by app/group/email |
invite_beta_tester | Add a new tester, optionally to groups/builds |
delete_beta_tester | Remove a tester from your team |
add_testers_to_beta_group | Add existing testers to a group |
remove_testers_from_beta_group | Remove testers from a group |
submit_build_for_beta_review | Send a build for TestFlight beta review |
list_customer_reviews | App Store reviews, filter by rating/territory |
get_customer_review | Single review with developer response |
respond_to_review | Post or update a developer reply |
download_sales_report | Daily/weekly/monthly/yearly units & sales TSV |
download_finance_report | Region finance/proceeds TSV; Total_* trailer lines in a separate summary |
list_users | App Store Connect team users |
list_user_invitations | Pending team invitations |
invite_user | Invite a new team member with roles; app visibility is explicit (allAppsVisible: true or a non-empty visibleAppIds, no all-apps default) |
asc_healthcheck | Verify credentials and upstream reachability; reports failures as data, not exceptions |
| Variable | Required | Notes |
|---|---|---|
APP_STORE_CONNECT_KEY_ID | yes | 10-character Key ID (e.g. ABC1234567) |
APP_STORE_CONNECT_ISSUER_ID | yes | Team Issuer ID (UUID) |
APP_STORE_CONNECT_PRIVATE_KEY | one of | Full PEM contents of your .p8. Newline-escapes (\n) are accepted. |
APP_STORE_CONNECT_PRIVATE_KEY_PATH | one of | Absolute path to the .p8 file |
Every write (invite_beta_tester, delete_beta_tester, add_testers_to_beta_group, remove_testers_from_beta_group, submit_build_for_beta_review, respond_to_review, invite_user) asks you to confirm before anything is sent. A client that can show a confirmation prompt (Claude Code) shows one with the exact request. On a client that cannot, the first call sends nothing and returns a preview — method, path and the JSON body it will send — plus a confirmToken; only a repeat call with the same arguments and that token performs the write. A token is single-use, expires, and is refused if any argument changed since the preview.
| variable | default | |
|---|---|---|
MCP_CONFIRM_MODE | ask-user | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). ask-user: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. auto: the same two steps, but the model may use the token after reviewing the preview itself. refuse: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless MCP_CONFIRM_ELICITATION=off. An unrecognised value is treated as refuse. |
MCP_CONFIRM_ELICITATION | on | off never sends a confirmation prompt, so every client gets the MCP_CONFIRM_MODE path. Set it for a client that declares it can show prompts but never does (the gated call hangs — opencode 2.0.x). Any other value stays on, with a stderr warning. |
MCP_CONFIRM_TTL_SECONDS | 600 | How long a token stays valid. |
MCP_CONFIRM_SECRET | random per process | Signing key; set it only if tokens must survive a server restart. |
npm install
npm test # vitest run
npm run test:watch # watch mode
npm run build # tsc + esbuild bundle
npm run dev # node --env-file=.env dist/index.js
Tests mock client.request / client.requestRaw; no real App Store Connect calls are made.
MIT