appstore-connect-mcp

Overview

This MCP server provides an innovative 'Code Mode' approach to accessing Apple's App Store Connect API, which contains 923 endpoints. Instead of creating individual tools for each endpoint (which would require ~100K+ context tokens), the server provides just two tools: 'search' for querying the OpenAPI spec and 'execute' for making API calls. This approach automatically adapts when Apple updates their API, requiring zero maintenance from the server side. The server handles authentication via Apple's JWT system using a P8 key and provides security through a Node.js sandbox that restricts potentially dangerous functions.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• searchsearch(code)

  Write JS to query Apple's OpenAPI spec. Discover endpoints, check parameters, read schemas.

  Try:Find all endpoints related to customer reviewsTry:Show me all subscription management endpoints
• executeexecute(code)

  Write JS to call the API. Auth is automatic. Chain multiple calls.

  Try:List all my appsTry:Get latest reviews for my first appTry:Get revenue data for the last 30 days

Comparable tools

Installation

claude mcp add appstore-connect -s user \
  -e APP_STORE_KEY_ID=YOUR_KEY_ID \
  -e APP_STORE_ISSUER_ID=YOUR_ISSUER_ID \
  -e APP_STORE_P8_PATH=/absolute/path/to/AuthKey_XXXXXXXXXX.p8 \
  -e APP_STORE_VENDOR_NUMBER=YOUR_VENDOR_NUMBER \
  -- npx -y @trialanderror-ai/appstore-connect-mcp

{
  "mcpServers": {
    "appstore-connect": {
      "command": "npx",
      "args": ["-y", "@trialanderror-ai/appstore-connect-mcp"],
      "env": {
        "APP_STORE_KEY_ID": "YOUR_KEY_ID",
        "APP_STORE_ISSUER_ID": "YOUR_ISSUER_ID",
        "APP_STORE_P8_PATH": "/path/to/AuthKey_XXXXXXXXXX.p8"
      }
    }
  }
}

FAQ

What makes this different from traditional MCP servers?

Instead of creating a separate tool for each of the 923 App Store Connect API endpoints, this server provides just 2 tools ('search' and 'execute') that allow the LLM to write JavaScript code to interact with the API directly. This reduces context usage from ~100K+ tokens to ~1K tokens and eliminates maintenance when Apple adds new endpoints.

How is authentication handled?

The server uses Apple's JWT authentication system. You need to provide a P8 key file, Key ID, and Issuer ID through environment variables. The JWT is automatically generated and injected into API calls without exposing credentials to the sandboxed code.

Compare appstore-connect-mcp with