appstoreconnect-mcp

A Model Context Protocol server for the Apple App Store Connect API. Drives apps, subscriptions, pricing, and more from any MCP-compatible client (Claude Code, Claude Desktop, Cursor, Windsurf).

The first published surface is subscription pricing — including a Purchasing Power Parity rebalance flow that's already been used to schedule 120 production price changes across 65 territories on a real iOS app. New ASC domains (TestFlight, sales, screenshots, IAPs) are designed to plug in one file at a time; see Roadmap.

Install (zero-config)

npx @akoskomuves/appstoreconnect-mcp init

The wizard:

1. Opens App Store Connect → Keys so you can download a .p8 (skipped if you already have one).
2. Copies the key to ~/.appstore/ with chmod 600.
3. Asks for your Issuer ID and (auto-detected) Key ID.
4. Verifies auth with a real API call before writing anything.
5. Detects which MCP clients you have installed — Claude Code, Claude Desktop, Cursor, Windsurf — and registers itself in the ones you pick.

When something looks off later, run a read-only diagnostic:

npx @akoskomuves/appstoreconnect-mcp doctor

Manual install

If you'd rather wire it up by hand, add to ~/.claude.json (Claude Code), claude_desktop_config.json (Claude Desktop), or your client's equivalent:

{
  "mcpServers": {
    "appstoreconnect": {
      "command": "npx",
      "args": ["-y", "@akoskomuves/appstoreconnect-mcp"],
      "env": {
        "ASC_ISSUER_ID": "...",
        "ASC_KEY_ID": "...",
        "ASC_PRIVATE_KEY_PATH": "~/.appstore/AuthKey_XXXXXXXXXX.p8"
      }
    }
  }
}

Or via Claude Code's CLI:

claude mcp add appstoreconnect \
  -e ASC_ISSUER_ID=... \
  -e ASC_KEY_ID=... \
  -e ASC_PRIVATE_KEY_PATH=~/.appstore/AuthKey_XXXXXXXXXX.p8 \
  -- npx -y @akoskomuves/appstoreconnect-mcp

Configure

Generate an App Store Connect API key at App Store Connect → Users and Access → Integrations → Keys. Pricing writes need the Admin role; read-only operations work with App Manager.

Variable	What
ASC_ISSUER_ID	Issuer UUID from the Keys page
ASC_KEY_ID	10-character Key ID
ASC_PRIVATE_KEY_PATH	Path to your downloaded AuthKey_XXXXXXXXXX.p8 file (~ is expanded)

The .p8 file is a private key — never commit it. Recommended: ~/.appstore/AuthKey_XXXXXXXXXX.p8 outside any repo.

Optional: In-App Purchase signing key

Only needed for the asc_sign_* tools (subscription offer redemption signing). Issue a second key at App Store Connect → Users and Access → Integrations → In-App Purchase — this is a separate key from the ASC API key above, generated on a different tab of the same page.

Variable	What
ASC_IAP_ISSUER_ID	Issuer UUID from the In-App Purchase keys tab (different from ASC_ISSUER_ID)
ASC_IAP_KEY_ID	10-character Key ID for the IAP key
ASC_IAP_PRIVATE_KEY_PATH	Path to the IAP signing .p8 (~ is expanded)

The server starts fine without these — only the asc_sign_* tools refuse with a setup message if they're missing. Set one or two but not all three and the server rejects with a clear error. Run appstoreconnect-mcp doctor to verify the key loads as a valid ES256 PKCS#8.

Optional: vendor number (sales + finance reports)

Only used by asc_get_sales_report / asc_get_finance_report. Your vendor number is account-level, shown at App Store Connect → Payments and Financial Reports next to your team name (a numeric string like 85123456).

Variable	What
ASC_VENDOR_NUMBER	Default vendor number for sales/finance report downloads

Without it the two report tools still work — they just need vendorNumber passed per call (and their error message tells you where to find it). Note: downloading sales/finance reports requires an API key with the Admin, Finance, or Sales role.

Tools

Apps

• asc_list_apps — list apps (filter by bundleId)
• asc_get_app — fetch one app by ID

Subscriptions

• asc_list_subscription_groups — groups for an app
• asc_get_subscription_group — fetch one group by ID
• asc_list_subscriptions — auto-renewable subscriptions in a group
• asc_get_subscription — fetch one subscription by ID
• asc_list_subscription_prices — current price schedule per subscription. One row per territory (~175 unfiltered) — pass territoryId to narrow to one market
• asc_list_subscription_price_points — valid price points for a subscription in a territory. Pass nearAmount to narrow the response to the nearest tiers around a target price.

Subscription products (writes)

Creating the hierarchy itself — the step that used to send you to the App Store Connect web UI. Four names, only two of which customers ever see:

Resource	Attribute	Who sees it
SubscriptionGroup	referenceName	internal only
SubscriptionGroupLocalization	name	customer — heading above the plan choices
Subscription	name	internal only
SubscriptionLocalization	name	customer — the individual plan

• asc_post_subscription_group — create the container every subscription must live in. A customer can hold only one active subscription per group, so mutually exclusive plans (Monthly vs Yearly) belong in the same group
• asc_patch_subscription_group — rename (referenceName is the only mutable attribute; groups cannot move between apps)
• asc_delete_subscription_group — lists the group's subscriptions first and refuses client-side naming the specific products that block the delete, instead of letting Apple return a bare 409
• asc_post_subscription — create an auto-renewable subscription. productId is permanent: it cannot be changed, and Apple never lets it be reused on the account — not even after the subscription is deleted. subscriptionPeriod is optional at create but required before submission; the new product starts in MISSING_METADATA and the success message lists the remaining steps
• asc_patch_subscription — name, subscriptionPeriod, familySharable, reviewNote, groupLevel. productId has no codepath here by construction. Nested offer/price arrays are deliberately unsupported — their wire semantic is replace, so a caller passing one offer would silently delete the rest; use the dedicated offer and price tools
• asc_delete_subscription — pre-checks state and refuses for products under review or ever approved, pointing at asc_post_subscription_availability as the way to stop selling a live product

Subscription group localizations

The customer-facing group heading — what the App Store renders above the plan choices, and what shows in Settings → Subscriptions. A group with no localizations cannot be submitted.

• asc_list_subscription_group_localizations / asc_get_subscription_group_localization
• asc_post_subscription_group_localization — name + locale, plus optional customAppName (overrides how the app name reads inside the subscription sheet; usually omit). Wire gotcha handled: the parent relationship key is subscriptionGroup, while Subscription calls the same parent group
• asc_patch_subscription_group_localization — name / customAppName; locale is the immutable lookup key
• asc_delete_subscription_group_localization

Subscription pricing (writes)

• asc_post_subscription_price — set the price for one territory, either the opening price or a scheduled change. Order matters, and both steps are confirmed live: territory availability → undated baseline → dated changes.
  • Omit startDate for a subscription's first price in a territory. The opening row is the undated baseline; a dated first price is a price change with nothing to change from. Apple says so outright — "Invalid startDate. Create a starting price before creating future prices." — and distance doesn't help (1, 8 and 29 days out all 409).
  • Availability must exist first. Without it even a correctly shaped undated POST fails, with a 409 that blames the price point (ENTITY_ERROR.RELATIONSHIP.INVALID → /data/relationships/subscriptionPricePoint/id). The price point is fine; Apple just can't price a territory the product isn't sold in. The tool translates both of these rather than passing the raw 409 through.
  • preserveCurrentPrice defaults to true on a dated change and is omitted on a baseline, where there's no existing cohort to grandfather. The created row reads preserved: false until a newer price supersedes it; that is expected, not a grandfathering failure
• asc_delete_subscription_price — cancel a pending scheduled change

App pricing (paid non-subscription apps)

• asc_list_app_prices — current price schedule for an app, splitting manual overrides from auto-derived prices and surfacing the base territory
• asc_list_app_price_points — valid Apple price tiers for an app in a given territory (~600+ tiers per territory). Pass nearAmount (target price) and optional nearCount (default 10) to narrow the response to the nearest tiers — Apple does not support a near-amount filter server-side, so the full list is still paginated but only the nearest tiers are surfaced.
• asc_post_app_price_schedule — replace the entire price schedule (whole-schedule replace, NOT a merge — matches Apple's API). Pre-flight refuses unless at least one entry targets the base territory with no startDate, and requires explicit acknowledgeReplacesAll: true. A separate acknowledgeDeletesScheduledIfBaseChanges ack is required when changing the base territory (Apple wipes pending scheduled changes on base-change). Apps have no grandfather mechanism — new schedules activate atomically at each entry's startDate.

In-app purchases (consumables, non-consumables, non-renewing subs)

• asc_list_iaps — list IAPs for an app (v2 surface only — auto-renewable subscriptions are covered by the Subscriptions tools above). Filterable by inAppPurchaseType and state. If this returns zero rows for an app you know has IAPs, the IAPs may be legacy-only and need to be migrated in the App Store Connect web UI before they appear here.
• asc_get_iap — fetch a single IAP by ID.
• asc_list_iap_prices — current price schedule for an IAP (same shape as app prices: manual overrides + auto-derived + base territory).
• asc_list_iap_price_points — valid Apple price tiers for an IAP in a given territory. Same nearAmount / nearCount narrowing as the app and subscription price-point tools.
• asc_post_iap_price_schedule — replace the entire IAP price schedule (same whole-schedule replace semantics as asc_post_app_price_schedule: acknowledgeReplacesAll: true, base-territory entry with no startDate, base-change ack required). No grandfather mechanism — same as apps.

Subscription introductory offers

Introductory offers target new subscribers — the discounted "first window" before the regular price kicks in.

• asc_list_subscription_introductory_offers — list intro offers (free trial / pay-as-you-go / pay-up-front) configured for a subscription, across territories. Apple's "all territories" wildcard (a single offer with no territory) surfaces as TERR=(all) in the table. Pass territoryId to narrow to one market — wildcard offers are always kept, since they are live everywhere.
• asc_get_subscription_introductory_offer — fetch one offer by ID.
• asc_post_subscription_introductory_offer — create an offer. Three offerModes: FREE_TRIAL (no price; omit pricePointId), PAY_AS_YOU_GO (charge the offer price each period for numberOfPeriods periods), PAY_UP_FRONT (single charge for the whole duration; Apple still requires numberOfPeriods — defaults to 1 when omitted). Pass territoryId to target one market, or omit it for Apple's "all territories" wildcard (uses the literal price point in every market — no auto-FX). Server-side validation refuses PAY_* without pricePointId, PAY_AS_YOU_GO without numberOfPeriods, and endDate ≤ startDate — Apple's error is surfaced inline otherwise.
• asc_patch_subscription_introductory_offer — narrow update path: only startDate, endDate, and pricePointId can change after creation. To change mode / duration / periods, delete and re-create.
• asc_delete_subscription_introductory_offer — delete a pending or active offer. Apple refuses to delete one that is currently redeemable; PATCH endDate to today to stop it instead.

Subscription promotional offers

Promotional offers target existing or lapsed subscribers — opposite eligibility from intro offers, set by the resource type itself (no per-offer flag). Apple caps active promo offers at 10 per subscription. After creation, only the per-territory prices can be edited — name, offerCode, offerMode, duration, and numberOfPeriods are immutable.

• asc_list_subscription_promotional_offers — list promo offers configured for a subscription.
• asc_get_subscription_promotional_offer — fetch a single offer, including its per-territory prices.
• asc_list_subscription_promotional_offer_prices — list per-territory price rows attached to an offer (territory + currency + amount + price-point ID).
• asc_post_subscription_promotional_offer — create an offer (name + offerCode + mode + duration + all per-territory prices) in one atomic POST. Pre-flights Apple's 10-offer cap and offerCode collisions, refusing with a clear remedy message instead of letting Apple 409.
• asc_patch_subscription_promotional_offer_prices — update the offer's per-territory prices. Apple's wire semantic is replace (the new prices array becomes the post-state, dropping any territory not listed); the tool's mode: 'replace' | 'add' | 'remove' parameter hides the footgun — 'add' reads current prices and merges, 'remove' reads and filters.
• asc_delete_subscription_promotional_offer — DELETE → 204.

Subscription win-back offers

Win-back offers target lapsed subscribers — customers who previously subscribed and churned — and Apple surfaces them automatically to eligible customers based on the offer's eligibility rules (or through your own StoreKit messaging). This is the third offer type alongside introductory and promotional. Richer than promo offers: they add eligibility targeting, a schedule, priority, and an auto-asset intent. referenceName, offerId, duration, offerMode, periodCount, targetSubscriptionPlanType, and the prices are immutable after creation.

• asc_list_subscription_win_back_offers — list win-back offers configured for a subscription.
• asc_get_subscription_win_back_offer — fetch a single offer, including its subscription and per-territory prices.
• asc_list_subscription_win_back_offer_prices — list per-territory price rows attached to an offer (territory + currency + amount + price-point ID).
• asc_post_subscription_win_back_offer — create an offer (identity + eligibility rules + schedule + priority + all per-territory prices) in one atomic POST. Eligibility is expressed as customerEligibilityPaidSubscriptionDurationInMonths, customerEligibilityTimeSinceLastSubscribedInMonths (an { minimum, maximum? } range), and an optional customerEligibilityWaitBetweenOffersInMonths. Pre-flights offerId collisions and validates the range + endDate > startDate.
• asc_patch_subscription_win_back_offer — update the mutable attributes only: eligibility, startDate/endDate, priority, and promotionIntent. To change identity, mode, duration, periods, or prices, delete and re-create.
• asc_delete_subscription_win_back_offer — DELETE → 204.

IAP & subscription review assets

The review screenshot Apple requires before an in-app purchase or subscription can be submitted, plus the optional promotional images — and, since v1.5, the App Review attachments of a version (files for the reviewer, e.g. a demo video). Five resources, each on the same three-step upload flow as app screenshots (reserve → PUT chunks → commit), with a composite asc_upload_* tool that does all three from a local file. Wire gotcha handled for you: the IAP image relates via inAppPurchase while the IAP review screenshot uses inAppPurchaseV2.

• Images (to-many, per IAP / subscription): asc_list_{iap,subscription}_images · asc_get_* · asc_upload_* (composite) · asc_post_* / asc_patch_* (raw reserve/commit) · asc_delete_*.
• Review screenshots (to-one, per IAP / subscription): asc_get_{iap,subscription}_review_screenshot (returns the single one, or null) · asc_upload_* · asc_post_* / asc_patch_* · asc_delete_*. Because it's to-one, the upload/reserve tools refuse if one already exists — delete it first.
• App Review attachments (to-many, per version's review detail): asc_list_review_attachments · asc_get_review_attachment · asc_upload_review_attachment (composite) · asc_post_* / asc_patch_* · asc_delete_*. The parent id is the appStoreReviewDetail id from asc_get_app_store_review_detail.

App Review details, submissions & release

The last manual steps between "metadata is ready" and "build is live":

• asc_get_app_store_review_detail / asc_post_… / asc_patch_… — the What-to-tell-App-Review card of a version: contact person, demo account (name/password/required), notes. To-one per version; Apple merges on PATCH.
• asc_post_app_store_version_release_request — ⚠️ release an approved (PENDING_DEVELOPER_RELEASE) version to the public App Store now — the "Release this version" click, automated. Only for manually-released versions; no undo.
• asc_post_iap_submission / asc_post_subscription_submission / asc_post_subscription_group_submission — submit an IAP / subscription / subscription group's pending metadata changes for review standalone, without a version release. Wire gotcha handled: the IAP one relates via inAppPurchaseV2.
• asc_get_subscription_grace_period / asc_patch_… — billing grace period per app: optIn / sandboxOptIn, duration (3 / 16 / 28 days), renewalType (all renewals vs paid-to-paid only). Keeps lapsed subscribers entitled while Apple retries payment.

Availabilities (subscriptions, IAPs, plans)

Per-territory availability of in-app products — the sibling of App Availability with one key difference: territory linkage uses bare 3-letter ISO codes (plain territories), not the opaque composites apps use.

• Subscriptions: asc_get_subscription_availability · asc_list_subscription_available_territories · asc_post_subscription_availability (POST-only full replacement — send the complete territory list; ⚠️ removed territories go off sale).
• IAPs: asc_get_iap_availability (reads through the v2 parent path) · asc_list_iap_available_territories · asc_post_iap_availability (same replace semantics).
• Subscription plans (per plan type MONTHLY / UPFRONT): asc_list_subscription_plan_availabilities · asc_list_subscription_plan_available_territories · asc_post_… · asc_patch_… (the one availability resource with a PATCH).

Subscription offer signing (in-app redemption)

The cryptographic signer that makes promo/intro offers redeemable in your iOS app via StoreKit. Uses a separate signing key from the ASC API key — issued at App Store Connect → Users and Access → Integrations → In-App Purchase. See the optional config section for env vars. Built on Apple's official @apple/app-store-server-library.

• asc_sign_promotional_offer_legacy — legacy ECDSA-concatenated signature used by StoreKit 1's SKPaymentDiscount and the original StoreKit 2 Product.PurchaseOption.promotionalOffer(offerID:keyID:nonce:signature:timestamp:) API. Returns the base64 signature plus the nonce, timestamp, and keyId for the caller to pass to StoreKit. Auto-generates a UUID nonce and current timestamp; both overridable for testing.
• asc_sign_promotional_offer — JWS v2 format introduced at WWDC 2025 (back-deployed to iOS 15). Use with StoreKit 2's newer promotional-offer purchase options. Returns the JWS compact serialization directly. transactionId (the customer's appTransactionId) is optional but strongly recommended.
• asc_sign_introductory_offer_eligibility — JWS v2 with aud="introductory-offer-eligibility". Lets you override StoreKit's default introductory-offer eligibility check (e.g. grant a returning customer another trial). New in WWDC 2025.

All signatures are valid for 24 hours from signing time — re-sign per redemption attempt rather than pre-signing and caching.

Age rating

The questionnaire App Review scores an app against — it gates submission, and there was previously no way to set it from here.

• asc_get_age_rating_declaration — read the answers. Shows only the non-default ones (a typical declaration has 29 attributes, nearly all at NONE/false) plus every override, so the few that actually drive the rating stand out.
• asc_patch_age_rating_declaration — answer the questionnaire. Content questions take a frequency (NONE / INFREQUENT_OR_MILD / FREQUENT_OR_INTENSE); the rest are booleans, plus the rating overrides and the Kids age band.

Two things about this resource are easy to get wrong, so the tools handle them for you. It hangs off AppInfo, not the version — age rating is per-app metadata like categories, and /v1/appStoreVersions/{id}/ageRatingDeclaration returns 404. And its ID is the AppInfo ID, so passing appId resolves the target automatically (if an app has several AppInfos across notarization tracks, the tool reports the candidates instead of guessing).

Apple merges on write: omitted keys keep their current value, so a partial update is safe — but you can't clear an answer by leaving it out, you have to send the explicit NONE/false. Overrides only ever raise the rating, never lower it.

Xcode Cloud (CI/CD)

The build side of the ship loop: watch runs, read failures, kick builds. Hierarchy: products → workflows → build runs → actions (build/test/archive/analyze) → issues / test results / artifacts. A finished run links the TestFlight builds it produced, handing off to the TestFlight tools.