Is io.github.pofky/appstore-connect-mcp safe to use?

io.github.pofky/appstore-connect-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.pofky/appstore-connect-mcp?

io.github.pofky/appstore-connect-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

io.github.pofky/appstore-connect-mcp

Check app review status, read reviews, download sales reports from App Store Connect

UnknownNot tested

Other

GitHub

16FNo CVEsunknown

Quick Install

{
  "mcpServers": {
    "io-github-pofky-appstore-connect-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Setup guide

No install config available. Check the server's README for setup instructions.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-pofky-appstore-connect-mcp)](https://mcppedia.org/s/io-github-pofky-appstore-connect-mcp)

Should you use this server?

Check app review status, read reviews, download sales reports from App Store Connect

✓

Is it safe?

No package registry to scan.

No authentication — any process on your machine can connect.

License not specified.

Is it maintained?

Commit history unknown.

Will it work with my client?

Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

README

App Store Connect MCP Server

The App Store Connect intelligence layer for your coding agent. 11 tools that think, 3 slash-command workflows, and a bundled Claude Skill. Not another API wrapper.

Maintained successor to JoshuaRileyDev/app-store-connect-mcp-server (archived Feb 2026). Different angle, same API surface plus more.

npm install -g @pofky/asc-mcp
asc-mcp install-skill   # one-line, optional, for auto-routed review questions

What Makes This Different

Other ASC MCP servers wrap the API and give you 80 to 293 raw endpoints. This one gives you 13 opinionated tools, 3 slash-command Prompts, and a Claude Skill that all think. Two of the tools use MCP Sampling: your own client's model does the LLM work, so there is no extra cost from this server.

You say	What happens
"Run a preflight check on my app"	Audits metadata, character limits, screenshots, build status. Catches the issues that cause 40% of rejections.
"Give me a morning briefing"	Summarizes all your apps: who's in review, who got rejected, new low-rating reviews, action items.
"Generate release notes from my git history"	Reads commits since last tag, categorizes them, and gives you structured data to write "What's New" text.
"List my apps"	Shows all your iOS/macOS apps with bundle IDs
"Is my app in review?"	Exact review state with context ("typical time: 24-48 hours")
"Show me 1-star reviews"	Customer reviews filtered by rating, territory, sorted by date
"What were my downloads this week?"	Sales and revenue summary by territory

No context switching. No portal. Just ask.

Setup (3 minutes)

Step 1. Create an API key in App Store Connect > Keys (Admin or App Manager role). Download the .p8 file.

Step 2. Install:

npm install -g @pofky/asc-mcp

Add to ~/.claude/settings.json (Claude Code) or your agent's MCP config:

{
  "mcpServers": {
    "appstore-connect": {
      "command": "asc-mcp",
      "env": {
        "ASC_KEY_ID": "YOUR_KEY_ID",
        "ASC_ISSUER_ID": "YOUR_ISSUER_ID",
        "ASC_PRIVATE_KEY_PATH": "~/.appstore/AuthKey_XXXX.p8"
      }
    }
  }
}

Step 3. Ask your agent: "List my App Store Connect apps"

Works with Claude Code, Cursor, Windsurf, Cline, and any MCP-compatible client.

Tools

Free (no account needed)

Tool	What it does
`list_apps`	List all your apps with name, bundle ID, SKU, platform
`app_details`	Version history, build status, release state, dates
`review_status`	Current review state with human-readable context

Pro ($9/mo)

Tool	What it does	Why it matters
`list_reviews`	Customer reviews filtered by rating, territory, sort order	See what users say without opening the portal
`sales_report`	Daily/weekly/monthly downloads and revenue by territory	Know your numbers instantly
`release_preflight`	Pre-submission audit: metadata, char limits, screenshots, builds	Catches 40%+ of common rejection causes before you submit
`daily_briefing`	Morning summary across all apps: status, reviews, rejections	One call replaces 10 minutes of portal clicking
`release_notes`	Git commits since last tag, categorized for writing "What's New"	Your AI agent writes release notes from your actual changes
`keyword_insights`	Analyze keywords against iTunes search competition, difficulty ratings	See which keywords are worth targeting at a glance
`competitor_snapshot`	Look up any app: ratings, reviews, version, price, release notes	Competitive intelligence without leaving your editor
`metadata_diff`	Compare live vs pending version metadata across all locales	Verify exactly what changed before submitting
`triage_revie

... View full README on GitHub

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Score Breakdown

MCPpedia Score

Click each category to see evidence

16F

Last scored 7h ago

How we score →

Security

3/30

No known vulnerabilities.

○

Known CVEs — No package registry to scan

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

✓

Tool stability — Tool definitions stable

○

Dependency health — No package to analyze

✗

License — No license specified

○

Authentication — No authentication required

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.pofky/appstore-connect-mcp safe to use?: io.github.pofky/appstore-connect-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.pofky/appstore-connect-mcp?: io.github.pofky/appstore-connect-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.pofky/appstore-connect-mcp?: io.github.pofky/appstore-connect-mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

Similar servers

View all →

Memory MCP Server

Official

No CVEs98A

Persistent memory using a knowledge graph

5 toolsstdio83.8k93.5k/wk1d ago

Hash-verified file editing MCP server with token efficiency hook. 11 tools for AI coding agents.

No CVEs95A

Hash-verified file editing MCP server with token efficiency hook. 11 tools for AI coding agents.

5 toolsremote398685.9k/wk11h ago

Context Mode

No CVEs95A

Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.

6 toolsremote7.3k10.0k/wk23h ago

Browser Tools Mcp

No CVEs94A

Monitor browser logs directly from Cursor and other MCP compatible IDEs.

7 toolsremote7.2k2.9k/wk28d ago

MCP Security Weekly

Get CVE alerts and security updates for io.github.pofky/appstore-connect-mcp and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?