Appstore Release Mcp

io.github.rabdulsalPublished by GitHub account rabdulsalv0.1.1Updated Oct 24, 2026

App Store release pilot — version bump, TestFlight upload, metadata, review submission

VerifiedSTDIODesktop onlyCloud & InfrastructureDeveloper Tools

Overview

AI-generated overview

A local MCP server that pilots the App Store release cycle for iOS and macOS apps: version bump, TestFlight upload, metadata, and review submission.

What you can do
Check configuration, credentials, toolchain and app record, and read app status, versions, review states and build processing states via the App Store Connect API. Bump build numbers or set the marketing version in local Xcode project files. Upload a build by running a fastlane lane as an async job, or upload an already-signed .ipa via xcrun altool, then poll job status and log tail. Update description, keywords, what's-new and promo text, and attach a build to create and submit a review submission.
When to use it
Use it when you want an assistant to drive App Store Connect releases from a Mac: bumping versions, getting a binary to Apple, editing listing metadata, and submitting for review without switching between tools.
Requirements
Runs locally on macOS with Xcode command line tools (xcrun altool) and, for the fastlane upload path, fastlane with a build-and-upload lane. Needs an App Store Connect API key (.p8) plus APPLE_KEY_ID, APPLE_ISSUER_ID, ASC_BUNDLE_ID, and either ASC_KEY_PATH or APPLE_KEY_CONTENT; APPLE_TEAM_ID is needed for fastlane uploads. Installed via npx appstore-release-mcp.
Before you install
Requires an App Store Connect API private key, supplied as a file path or base64 content in APPLE_KEY_CONTENT; Apple allows the .p8 to be downloaded only once. The server writes to local project files when bumping versions and uploads binaries to Apple. asc_submit_review submits a release for review, described as the point of no return, so confirm with a human first. Build jobs die if the MCP client disconnects mid-build.

Installation

In SourceWeft

  1. Open Appstore Release Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

appstore-release-mcp

An MCP server that drives the full App Store release cycle for iOS and macOS apps: version bump → archive + TestFlight upload → metadata → review submission → status.

What makes it different: existing App Store Connect MCP servers wrap the REST API — metadata, TestFlight management, analytics. None of them can do the one step the REST API doesn't support: getting a binary onto Apple's servers. This server is a release pilot, not an API browser, and gives you two ways to do that:

  • Direct ASC REST API (ES256 JWT, zero-dependency signing via node:crypto) for status, builds, metadata, and review submission
  • asc_upload_build — your existing fastlane lane archives, signs, and uploads, run as an async job with log polling (a real archive takes 5–15 minutes — no MCP timeout can hold that)
  • asc_upload_ipa — already have a signed .ipa? (from eas build, a CI pipeline, a manual Xcode archive) Upload it directly via xcrun altool — no fastlane, no local archive step, nothing to configure beyond the ASC API key you already have
  • Local version bumping across project.pbxproj (and project.yml for xcodegen projects)

Requirements

  • macOS with Xcode command line tools (xcrun altool — used by asc_upload_ipa)
  • fastlane with a lane that builds and uploads (e.g. beta) — only needed for asc_upload_build; skip it entirely if you're only using asc_upload_ipa
  • An App Store Connect API key (.p8)

Setup

  1. Generate an ASC API key (once): App Store Connect → Users and Access → Integrations → App Store Connect API → Team Keys → Generate (role: App Manager). Download the .p8 — Apple lets you download it exactly once. Keep it in ~/.appstoreconnect/private_keys/.

  2. Register with Claude Code:

bash
claude mcp add appstore \  -e APPLE_KEY_ID=XXXXXXXXXX \  -e APPLE_ISSUER_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx \  -e ASC_KEY_PATH=$HOME/.appstoreconnect/private_keys/AuthKey_XXXXXXXXXX.p8 \  -e APPLE_TEAM_ID=XXXXXXXXXX \  -e ASC_BUNDLE_ID=com.example.myapp \  -e ASC_PROJECT_DIR=/path/to/your/xcode/project \  -- npx appstore-release-mcp

For a macOS app whose Fastfile uses platform :mac, add -e ASC_PLATFORM=MAC_OS -e ASC_FASTLANE_PLATFORM=mac.

  1. Verify: ask the agent to run asc_doctor. All checks should be ✓.

Tools

ToolWhat it does
asc_doctorVerify config, creds, fastlane/xcodebuild/altool, app record — run first
asc_app_statusVersions + review states + recent builds in one call
asc_list_buildsBuild processing states (wait for VALID after upload)
asc_bump_versionBump build number / set marketing version in local project files
asc_upload_buildRun your fastlane upload lane as an async job — returns job ID immediately
asc_upload_ipaUpload an already-built .ipa via xcrun altool — async job, no fastlane needed
asc_job_statusPoll a job started by asc_upload_build or asc_upload_ipa; status + log tail
asc_update_metadataDescription / keywords / what's-new / promo text via REST
asc_submit_reviewAttach build + create review submission + submit

Release walkthrough

Building locally with fastlane:

asc_doctor                                   # toolchain healthy?asc_bump_version {marketing_version: "1.1.0"}asc_upload_build                             # → job idasc_job_status {job_id}                      # poll until succeededasc_list_builds                              # wait for processingState VALIDasc_update_metadata {whats_new: "...", create_version: "1.1.0"}asc_submit_review {build_id}                 # point of no returnasc_app_status                               # WAITING_FOR_REVIEW

Already have a signed .ipa (EAS Build, CI, manual archive) — no fastlane needed:

asc_doctorasc_upload_ipa {ipa_path: "./build/app.ipa"} # → job idasc_job_status {job_id}                      # poll until succeededasc_list_builds                              # wait for processingState VALIDasc_update_metadata {whats_new: "...", create_version: "1.1.0"}asc_submit_review {build_id}asc_app_status

Environment variables

Credential names deliberately match fastlane's app_store_connect_api_key, so one credential set serves both.

VarRequiredNotes
APPLE_KEY_IDyesASC API key ID
APPLE_ISSUER_IDyesASC issuer ID
APPLE_KEY_CONTENT / ASC_KEY_PATHone ofbase64-encoded .p8 / path to .p8 file
APPLE_TEAM_IDfor asc_upload_buildApple Developer team ID (not needed for asc_upload_ipa)
ASC_BUNDLE_IDyesyour app's bundle identifier
ASC_PROJECT_DIRrecommendedXcode project root where fastlane runs (default: cwd)
ASC_PLATFORMnoIOS (default), MAC_OS, TV_OS, VISION_OS
ASC_FASTLANE_LANEnoupload lane name (default: beta)
ASC_FASTLANE_PLATFORMnofastlane platform prefix, e.g. mac or ios
ASC_UPLOAD_CMDnofull override, e.g. bundle exec fastlane ios beta

Notes

  • Build jobs are children of the server process; if the MCP client disconnects mid-build the job dies. Logs persist in ~/.appstore-mcp/jobs/ either way.
  • asc_submit_review is the point of no return for a release — the tool description tells agents to confirm with a human first.

License

MIT

Source: README.md at commit 6da183e

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts