asc-mcp

App Store Connect MCP Server — register, test, ship.

Every other ASC MCP can list your apps. This one ships them — and now manages TestFlight too.

One tool, 28 actions. Bundle ID registration, metadata, screenshots, age rating, TestFlight groups + testers, composite one-call shipping — all from your AI agent.

Why This Exists

Existing ASC MCP servers (JoshuaRileyDev 288 stars, SardorbekR 13 stars) are read-heavy, write-light. They can list apps and manage basic TestFlight. None can submit for review. None have composite actions.

We built this after shipping two iOS apps entirely from Claude Code's CLI — and burning ~15 API calls just discovering age rating field types. The schemas are now baked in.

What It Does

Read

Write

TestFlight

Composites (multi-step in one call)

Schemas Baked In

The stuff that wastes tokens if you don't know it:

• Age rating: 13 enum fields (NONE/INFREQUENT_OR_MILD/FREQUENT_OR_INTENSE) + 9 boolean fields. ALL required in one PATCH call.
• Categories: String IDs like TRAVEL, SOCIAL_NETWORKING — not UUIDs.
• Screenshot types: iphone_67 → APP_IPHONE_67 (1290x2796), etc.
• Phone format: Must be international: +44 844 209 0611
• Privacy labels: No API — must use ASC web UI (we tell you this upfront instead of letting you waste calls discovering it).
• App creation: Cannot be done via API — must use ASC web UI (Apple limitation).

Setup

1. Get an API Key

App Store Connect → Users and Access → Integrations → Keys → Generate.

You need:

• Key ID (from the key name, e.g., V82Q36H9CR)
• Issuer ID (UUID at the top of the Keys page)
• `.p8` key file (download once, save to ~/private_keys/)

2. Install

Using uv (recommended):

cd /path/to/asc-mcp
uv venv && uv pip install fastmcp PyJWT cryptography

Or with pip:

pip install fastmcp PyJWT cryptography

3. Configure

Add to your .mcp.json (Claude Code, Cursor, etc.):

{
  "mcpServers": {
    "asc": {
      "command": "python3",
      "args": ["/path/to/asc-mcp/server.py"],
      "env": {
        "ASC_KEY_ID": "YOUR_KEY_ID",
        "ASC_ISSUER_ID": "YOUR_ISSUER_ID",
        "ASC_KEY_PATH": "~/private_keys/AuthKey_XXXX.p8"
      }
    }
  }
}

If your key is in ~/private_keys/AuthKey_*.p8, Key ID and path are auto-discovered. You still need ASC_ISSUER_ID.

Example: Ship an App (8 calls)

asc action=schema
asc action=find_app bundle_id=com.example.myapp
asc action=upload_metadata version_id=XXX description="My app" keywords="app,cool"
asc action=set_age_rating app_id=XXX
asc action=set_pricing_free app_id=XXX
asc action=upload_screenshots version_id=XXX display_type=iphone_67 screenshot_paths=["/path/1.png","/path/2.png"]
asc action=attach_build version_id=XXX build_id=YYY
asc action=submit_for_review app_id=XXX version_id=XXX

Example: Ship an App (2 calls with composites)

asc action=ship_app bundle_id=com.example.myapp
asc action=submit_for_review app_id=XXX version_id=XXX

Example: TestFlight (1 call)

asc action=testflight_setup app_id=XXX build_id=YYY whats_new="Test the new onboarding flow" beta_description="Beta version of MyApp" [email protected]

Example: Add a Tester

asc action=add_beta_tester app_id=XXX [email protected] first_name=Jane last_name=Doe

Known Limitations

• Privacy nutrition labels cannot be set via the ASC API. You must use the App Store Connect web UI.
• App creation cannot be done via API (Apple 403s the endpoint). Register apps in the ASC web UI.
• IPA upload is done via xcrun altool, not this MCP (Apple's Transporter handles binary upload, not the REST API).
• Paid apps: Only set_pricing_free is implemented. Paid tiers need price point lookup per territory.

License

MIT