Findings & checks · 1 flagged
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · README.md
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
- Decode the base64 string and confirm it is not an instruction directed at the agent.
- Move any legitimate binary or signature data into a dedicated file (
*.sig,SIGNATURES) outside the documentation.
Trace & refs
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<img src="assets/banner.png" alt="XcodeBuild MCP" width="600"/>
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Installation
XcodeBuildMCP ships as a single package with two modes: a CLI for direct terminal use and an MCP server for AI coding agents. Either install method gives you both.
Option A — Homebrew
brew tap getsentry/xcodebuildmcp
brew install xcodebuildmcpOption B — npm (Node.js 18+)
npm install -g xcodebuildmcp@latestVerify either install:
xcodebuildmcp --helpConnect your MCP client
Drop-in config snippets for Cursor, Claude Code, Codex, can be found in the official docs page MCP Clients. Most clients can also run the MCP server on demand via npx -y xcodebuildmcp@latest mcp without a global install.
Requirements
- macOS 14.5 or later
- Xcode 16.x or later
- Node.js 18.x or later (not required for Homebrew installation)
Skills
XcodeBuildMCP now includes two optional agent skills:
- MCP Skill: Primes the agent with instructions on how to use the MCP server's tools (optional when using the MCP server).
- CLI Skill: Primes the agent with instructions on how to navigate the CLI (recommended when using the CLI).
To install with a global binary:
xcodebuildmcp initOr install directly via npx without a global install:
npx -y xcodebuildmcp@latest initFor further information on installing skills, see Agent Skills.
Notes
- XcodeBuildMCP requests xcodebuild to skip macro validation to avoid errors when building projects that use Swift Macros.
- Device tools require code signing to be configured in Xcode. See Device Code Signing.
Privacy
XcodeBuildMCP uses Sentry for internal runtime error telemetry only. For details and opt-out instructions, see Privacy & Telemetry.
CLI
XcodeBuildMCP provides a unified command-line interface. The mcp subcommand starts the MCP server, while all other commands provide direct terminal access to tools:
# Install globally
npm install -g xcodebuildmcp@latest
# Start the MCP server (for MCP clients)
xcodebuildmcp mcp
# List available tools
xcodebuildmcp tools
# Build for simulator
xcodebuildmcp simulator build --scheme MyApp --project-path ./MyApp.xcodeprojCheck for updates and upgrade in place:
xcodebuildmcp upgrade --check
xcodebuildmcp upgrade --yesThe CLI uses a per-workspace daemon for stateful operations (log capture, debugging, etc.) that auto-starts when needed. See the CLI guide for full documentation.
Documentation
- Installation: https://xcodebuildmcp.com/docs/installation
- Setup: https://xcodebuildmcp.com/docs/setup
- MCP clients: https://xcodebuildmcp.com/docs/clients
- CLI usage: https://xcodebuildmcp.com/docs/cli
- Configuration and options: https://xcodebuildmcp.com/docs/configuration
- Tools reference: https://xcodebuildmcp.com/docs/tools
- Troubleshooting: https://xcodebuildmcp.com/docs/troubleshooting
- Privacy: https://xcodebuildmcp.com/docs/privacy
- Skills: https://xcodebuildmcp.com/docs/skills
- Contributing: https://xcodebuildmcp.com/docs/contributing
Licence
This project is licensed under the MIT License - see the LICENSE file for details. For third-party licensing notices see the THIRD_PARTY_LICENSES file for details. For npm package attributions see the THIRD_PARTY_PACKAGE_LICENSES file for details.