Skip to content

zelentsov-dev/asc-mcp

v3.16.0 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-tools app-store-connect claude in-app-purchase ios macos
+6 more
mcp model-context-protocol subscriptions swift testflight xcode-cloud

Summary

AI summary

Updates Verification, Safety and compatibility, and Highlights across a mixed release.

Full changelog

Highlights

  • Added 13 version-scoped in-app purchase tools for App Store Connect API 4.4.1.
  • Added 26 subscription version, metadata, and plan-availability tools.
  • Added 9 review-submission tools for discovery, item assembly, submission, cancellation, and recovery inspection.

Safety and compatibility

  • Non-idempotent writes now distinguish confirmed rejection, unknown outcome, and accepted-but-unverified responses without unsafe automatic replay.
  • Commerce pagination is bound to the exact parent, filters, projection, include set, and effective page size.
  • Upload reservation recovery uses immutable file fingerprints and requires one unique match.
  • No existing MCP tool was removed or renamed; the public surface grows from 403 to 451 tools.

Apple 4.4.1 contract

  • 421 operations mapped, 479 explicitly deferred, and 363 scoped out; all 1,263 Apple operations are accounted for.
  • All 2,428 optional inputs are classified: 924 public, 40 internally controlled, 1,464 intentionally omitted, and 0 unclassified.

Verification

  • Debug and release builds completed with zero release warnings.
  • All 1,435 tests passed.
  • Strict operation, generated coverage, and release contracts passed on develop, main, and the annotated release tag.
  • develop CI: https://github.com/zelentsov-dev/asc-mcp/actions/runs/29781364312
  • main CI: https://github.com/zelentsov-dev/asc-mcp/actions/runs/29781892483
  • tag CI: https://github.com/zelentsov-dev/asc-mcp/actions/runs/29782286490

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track zelentsov-dev/asc-mcp

Get notified when new releases ship.

Sign up free

About zelentsov-dev/asc-mcp

App Store Connect API server with 208 tools for managing apps, builds, TestFlight, subscriptions, reviews, and more — directly from any MCP client.

All releases →

Related context

Earlier breaking changes

  • v3.1.0 `app_versions_set_review_details.attachment_file_id` replaced by separate `review_attachments_upload` call.
  • v3.1.0 Moved app-level TestFlight contact and policy metadata from `builds_set_beta_localization` to corresponding `beta_app_*_localization` tools.
  • v3.1.0 `builds_update_beta_detail` no longer accepts read-only fields `internal_build_state` or `external_build_state`.
  • v3.0.0 Removed public prefixes `offer_codes_*`, `intro_offers_*`, `promo_offers_*`, and `winback_*` from v3 worker schema.

Beta — feedback welcome: [email protected]