This release includes 1 breaking change for platform teams planning a safe upgrade.
Published 5mo
MCP SaaS Integrations
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai-tools
app-store-connect
claude
in-app-purchase
ios
macos
+6 more
mcp
model-context-protocol
subscriptions
swift
testflight
xcode-cloud
Affected surfaces
auth
Summary
AI summaryRemoved relative companies.json from default config paths for security.
Changelog
Fixed
- Removed relative
companies.jsonfrom default config paths (security improvement)
Breaking Changes
- Removed relative `companies.json` entry from default configuration path list
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About zelentsov-dev/asc-mcp
App Store Connect API server with 208 tools for managing apps, builds, TestFlight, subscriptions, reviews, and more — directly from any MCP client.
Related context
Related tools
Earlier breaking changes
- v3.1.0 `app_versions_set_review_details.attachment_file_id` replaced by separate `review_attachments_upload` call.
- v3.1.0 Moved app-level TestFlight contact and policy metadata from `builds_set_beta_localization` to corresponding `beta_app_*_localization` tools.
- v3.1.0 `builds_update_beta_detail` no longer accepts read-only fields `internal_build_state` or `external_build_state`.
- v3.0.0 Removed public prefixes `offer_codes_*`, `intro_offers_*`, `promo_offers_*`, and `winback_*` from v3 worker schema.
Beta — feedback welcome: [email protected]