
Appstore Release Mcp
io.github.rabdulsalPublished by GitHub account rabdulsalv0.1.1Updated Oct 24, 2026
App Store release pilot — version bump, TestFlight upload, metadata, review submission
Overview
A local MCP server that pilots the App Store release cycle for iOS and macOS apps: version bump, TestFlight upload, metadata, and review submission.
- What you can do
- Check configuration, credentials, toolchain and app record, and read app status, versions, review states and build processing states via the App Store Connect API. Bump build numbers or set the marketing version in local Xcode project files. Upload a build by running a fastlane lane as an async job, or upload an already-signed .ipa via xcrun altool, then poll job status and log tail. Update description, keywords, what's-new and promo text, and attach a build to create and submit a review submission.
- When to use it
- Use it when you want an assistant to drive App Store Connect releases from a Mac: bumping versions, getting a binary to Apple, editing listing metadata, and submitting for review without switching between tools.
- Requirements
- Runs locally on macOS with Xcode command line tools (xcrun altool) and, for the fastlane upload path, fastlane with a build-and-upload lane. Needs an App Store Connect API key (.p8) plus APPLE_KEY_ID, APPLE_ISSUER_ID, ASC_BUNDLE_ID, and either ASC_KEY_PATH or APPLE_KEY_CONTENT; APPLE_TEAM_ID is needed for fastlane uploads. Installed via npx appstore-release-mcp.
Installation
In SourceWeft
- Open Appstore Release Mcp in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
appstore-release-mcp
An MCP server that drives the full App Store release cycle for iOS and macOS apps: version bump → archive + TestFlight upload → metadata → review submission → status.
What makes it different: existing App Store Connect MCP servers wrap the REST API — metadata, TestFlight management, analytics. None of them can do the one step the REST API doesn't support: getting a binary onto Apple's servers. This server is a release pilot, not an API browser, and gives you two ways to do that:
- Direct ASC REST API (ES256 JWT, zero-dependency signing via
node:crypto) for status, builds, metadata, and review submission asc_upload_build— your existing fastlane lane archives, signs, and uploads, run as an async job with log polling (a real archive takes 5–15 minutes — no MCP timeout can hold that)asc_upload_ipa— already have a signed.ipa? (fromeas build, a CI pipeline, a manual Xcode archive) Upload it directly viaxcrun altool— no fastlane, no local archive step, nothing to configure beyond the ASC API key you already have- Local version bumping across
project.pbxproj(andproject.ymlfor xcodegen projects)
Requirements
- macOS with Xcode command line tools (
xcrun altool— used byasc_upload_ipa) - fastlane with a lane that builds and uploads (e.g.
beta) — only needed forasc_upload_build; skip it entirely if you're only usingasc_upload_ipa - An App Store Connect API key (
.p8)
Setup
-
Generate an ASC API key (once): App Store Connect → Users and Access → Integrations → App Store Connect API → Team Keys → Generate (role: App Manager). Download the
.p8— Apple lets you download it exactly once. Keep it in~/.appstoreconnect/private_keys/. -
Register with Claude Code:
For a macOS app whose Fastfile uses platform :mac, add -e ASC_PLATFORM=MAC_OS -e ASC_FASTLANE_PLATFORM=mac.
- Verify: ask the agent to run
asc_doctor. All checks should be ✓.
Tools
Release walkthrough
Building locally with fastlane:
Already have a signed .ipa (EAS Build, CI, manual archive) — no fastlane needed:
Environment variables
Credential names deliberately match fastlane's app_store_connect_api_key, so one credential set serves both.
Notes
- Build jobs are children of the server process; if the MCP client disconnects mid-build the job dies. Logs persist in
~/.appstore-mcp/jobs/either way. asc_submit_reviewis the point of no return for a release — the tool description tells agents to confirm with a human first.
License
MIT
Source: README.md at commit 6da183e
Tools
0Version history
1- v0.1.1LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts