Seriousmonster App Store Connect MCP Server
@seriousmonster/app-store-connect-mcp
npm
v0.2.1
Published by @seriousmonster — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
STOMP — MCP server for the Apple App Store Connect API. 162 tools for managing iOS/macOS apps, TestFlight, builds, in-app purchases, subscriptions, certificates, App Store submissions, analytics, Game Center, Xcode Cloud, and more.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 1 = 99. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 162
Each tool and what it can reach — statically extracted from the published source.
add_build_to_beta_groupno sensitive capabilityadd_tester_to_beta_groupno sensitive capabilityapi_requestno sensitive capabilityclear_sandbox_tester_purchase_historyno sensitive capabilitycreate_analytics_report_requestno sensitive capabilitycreate_appno sensitive capabilitycreate_app_clip_default_experienceno sensitive capabilitycreate_app_encryption_declarationno sensitive capabilitycreate_app_eventno sensitive capabilitycreate_app_event_localizationno sensitive capability
Show 152 more tools ↓
create_app_store_versionno sensitive capabilitycreate_app_store_version_submissionno sensitive capabilitycreate_beta_app_localizationno sensitive capabilitycreate_beta_build_localizationno sensitive capabilitycreate_beta_groupno sensitive capabilitycreate_beta_testerno sensitive capabilitycreate_certificateno sensitive capabilitycreate_eulano sensitive capabilitycreate_game_center_achievementno sensitive capabilitycreate_game_center_groupno sensitive capabilitycreate_game_center_leaderboardno sensitive capabilitycreate_game_center_leaderboard_setno sensitive capabilitycreate_iap_localizationno sensitive capabilitycreate_in_app_purchaseno sensitive capabilitycreate_phased_releaseno sensitive capabilitycreate_previewno sensitive capabilitycreate_preview_setno sensitive capabilitycreate_profileno sensitive capabilitycreate_review_responseno sensitive capabilitycreate_screenshotno sensitive capabilitycreate_screenshot_setno sensitive capabilitycreate_subscriptionno sensitive capabilitycreate_subscription_groupno sensitive capabilitycreate_subscription_introductory_offerno sensitive capabilitycreate_subscription_localizationno sensitive capabilitycreate_version_localizationno sensitive capabilitycreate_version_release_requestno sensitive capabilitydelete_app_clip_default_experienceno sensitive capabilitydelete_app_eventno sensitive capabilitydelete_app_event_localizationno sensitive capabilitydelete_beta_groupno sensitive capabilitydelete_beta_testerno sensitive capabilitydelete_eulano sensitive capabilitydelete_game_center_achievementno sensitive capabilitydelete_game_center_leaderboardno sensitive capabilitydelete_game_center_leaderboard_setno sensitive capabilitydelete_iap_localizationno sensitive capabilitydelete_in_app_purchaseno sensitive capabilitydelete_phased_releaseno sensitive capabilitydelete_previewno sensitive capabilitydelete_preview_setno sensitive capabilitydelete_profileno sensitive capabilitydelete_review_responseno sensitive capabilitydelete_screenshotno sensitive capabilitydelete_screenshot_setno sensitive capabilitydelete_subscriptionno sensitive capabilitydelete_subscription_localizationno sensitive capabilitydisable_bundle_id_capabilityno sensitive capabilityenable_bundle_id_capabilityno sensitive capabilityget_analytics_report_requestno sensitive capabilityget_appno sensitive capabilityget_app_clipno sensitive capabilityget_app_encryption_declarationno sensitive capabilityget_app_infono sensitive capabilityget_app_price_scheduleno sensitive capabilityget_beta_app_review_detailno sensitive capabilityget_certificateno sensitive capabilityget_ci_build_runno sensitive capabilityget_ci_productno sensitive capabilityget_ci_workflowno sensitive capabilityget_customer_reviewno sensitive capabilityget_game_center_detailno sensitive capabilityget_in_app_purchaseno sensitive capabilityget_phased_releaseno sensitive capabilityget_profileno sensitive capabilityget_subscription_groupno sensitive capabilityget_version_localizationno sensitive capabilitylist_age_rating_declarationsno sensitive capabilitylist_analytics_report_instancesno sensitive capabilitylist_analytics_report_requestsno sensitive capabilitylist_analytics_report_segmentsno sensitive capabilitylist_analytics_reportsno sensitive capabilitylist_app_categoriesno sensitive capabilitylist_app_clip_default_experiencesno sensitive capabilitylist_app_clipsno sensitive capabilitylist_app_encryption_declarationsno sensitive capabilitylist_app_event_localizationsno sensitive capabilitylist_app_eventsno sensitive capabilitylist_app_info_localizationsno sensitive capabilitylist_app_infosno sensitive capabilitylist_app_price_pointsno sensitive capabilitylist_app_store_versionsno sensitive capabilitylist_appsno sensitive capabilitylist_beta_app_localizationsno sensitive capabilitylist_beta_build_localizationsno sensitive capabilitylist_beta_groupsno sensitive capabilitylist_beta_testersno sensitive capabilitylist_buildsno sensitive capabilitylist_bundle_id_capabilitiesno sensitive capabilitylist_bundle_idsno sensitive capabilitylist_certificatesno sensitive capabilitylist_ci_artifactsno sensitive capabilitylist_ci_build_actionsno sensitive capabilitylist_ci_build_runsno sensitive capabilitylist_ci_issuesno sensitive capabilitylist_ci_mac_os_versionsno sensitive capabilitylist_ci_productsno sensitive capabilitylist_ci_test_resultsno sensitive capabilitylist_ci_workflowsno sensitive capabilitylist_ci_xcode_versionsno sensitive capabilitylist_customer_reviewsno sensitive capabilitylist_devicesno sensitive capabilitylist_eulasno sensitive capabilitylist_game_center_achievementsno sensitive capabilitylist_game_center_groupsno sensitive capabilitylist_game_center_leaderboard_setsno sensitive capabilitylist_game_center_leaderboardsno sensitive capabilitylist_iap_localizationsno sensitive capabilitylist_iap_price_pointsno sensitive capabilitylist_in_app_purchasesno sensitive capabilitylist_preview_setsno sensitive capabilitylist_previewsno sensitive capabilitylist_profilesno sensitive capabilitylist_sandbox_testersno sensitive capabilitylist_screenshot_setsno sensitive capabilitylist_screenshotsno sensitive capabilitylist_subscription_groupsno sensitive capabilitylist_subscription_localizationsno sensitive capabilitylist_subscription_price_pointsno sensitive capabilitylist_subscription_pricesno sensitive capabilitylist_subscriptionsno sensitive capabilitylist_territoriesno sensitive capabilitylist_usersno sensitive capabilitylist_version_localizationsno sensitive capabilityregister_bundle_idno sensitive capabilityremove_tester_from_beta_groupno sensitive capabilityrevoke_certificateno sensitive capabilitystart_ci_build_runno sensitive capabilitysubmit_build_for_beta_reviewno sensitive capabilitysubmit_iap_for_reviewno sensitive capabilitysubmit_subscription_groupno sensitive capabilityupdate_age_rating_declarationno sensitive capabilityupdate_app_clip_default_experienceno sensitive capabilityupdate_app_eventno sensitive capabilityupdate_app_event_localizationno sensitive capabilityupdate_app_infono sensitive capabilityupdate_app_info_localizationno sensitive capabilityupdate_app_store_versionno sensitive capabilityupdate_beta_app_localizationno sensitive capabilityupdate_beta_app_review_detailno sensitive capabilityupdate_beta_build_localizationno sensitive capabilityupdate_eulano sensitive capabilityupdate_game_center_achievementno sensitive capabilityupdate_game_center_leaderboardno sensitive capabilityupdate_iap_localizationno sensitive capabilityupdate_in_app_purchaseno sensitive capabilityupdate_phased_releaseno sensitive capabilityupdate_review_responseno sensitive capabilityupdate_sandbox_testerno sensitive capabilityupdate_subscriptionno sensitive capabilityupdate_subscription_localizationno sensitive capabilityupdate_version_localizationno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (162 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.2.1 latest |
A 99/100 | 0 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @seriousmonster/app-store-connect-mcp --onlineOther implementations of Seriousmonster App Store Connect 2
Independent packages implementing the same tool, scanned with the same engine. Compare all 3 side by side →
MCP server for Apple App Store Connect API: apps, releases, TestFlight, reviews, provisioning, users, reports, and generic API access.
MCP Server for App Store Connect API - Analyze your iOS/macOS app performance, sales, reviews, and more
More in Developer Tools
Hotel booking MCP server — 300K+ properties, real confirmation numbers, loyalty programs. Builders monetize every booking via Stripe Connect. The first MCP server that completes real hotel reservations inside AI conversations.
Manage AdGuard Home through AI assistants
Read-only Azure DevOps for MCP clients using only your existing browser session — no PAT, no Azure CLI. Browse work items, pull requests, comments, attachments and Artifacts feeds across every project, repo and feed you can access.
MCP server for Adobe Experience Manager Assets integration development
Servidor MCP para el tiempo oficial de España (API pública OpenData de AEMET). Predicción, observación y avisos como herramientas MCP tipadas.
A standalone MCP stdio bridge for Affinity by Canva's local MCP SSE server.