Skip to content

zelentsov-dev/asc-mcp

v3.18.0 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-tools app-store-connect claude in-app-purchase ios macos
+6 more
mcp model-context-protocol subscriptions swift testflight xcode-cloud

Summary

AI summary

Updates Verification, Reliability and safety, and Compatibility across a mixed release.

Full changelog

Highlights

  • Added six beta_groups_* tools for TestFlight public-link recruitment criteria, option discovery, and compatible-build checks.
  • Added five metrics_* tools for app, group, public-link, tester, and build TestFlight usage metrics.
  • Added App Store Connect appDevices context to beta tester projections.

Reliability and safety

  • Recruitment mutations require Apple's exact success statuses and fresh parent-scoped verification.
  • Ambiguous writes fail closed with machine-readable inspection guidance and are never attributed from later state alone.
  • Recruitment filter output distinguishes omission, explicit null, empty arrays, and populated values.
  • TestFlight metric responses validate canonical identities, required JSON:API links, endpoint-specific fields, filter scope, and pagination continuity.
  • Recruitment criteria deletion now requires an exact criterion-ID confirmation.

Compatibility

  • The public MCP surface grows from 461 to 472 tools.
  • No existing tool name or worker filter key is removed or renamed.
  • All 1,263 operations in the pinned App Store Connect OpenAPI 4.4.1 snapshot remain classified: 441 mapped, 459 explicitly deferred, and 363 scoped out.
  • All 2,548 optional inputs remain classified: 993 bound, 40 internally controlled, 1,515 intentionally omitted, and 0 unclassified.

Verification

  • Release commit: f1a71db41761a8a5e981793fe2241e092b964342
  • 1,562 tests in 124 suites passed.
  • Debug and release builds passed without release warnings.
  • Strict OpenAPI contract passed with 0 structural errors, 0 implementation drift, and 0 warnings.
  • develop CI
  • main CI
  • v3.18.0 tag CI

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track zelentsov-dev/asc-mcp

Get notified when new releases ship.

Sign up free

About zelentsov-dev/asc-mcp

App Store Connect API server with 208 tools for managing apps, builds, TestFlight, subscriptions, reviews, and more — directly from any MCP client.

All releases →

Related context

Earlier breaking changes

  • v3.1.0 `app_versions_set_review_details.attachment_file_id` replaced by separate `review_attachments_upload` call.
  • v3.1.0 Moved app-level TestFlight contact and policy metadata from `builds_set_beta_localization` to corresponding `beta_app_*_localization` tools.
  • v3.1.0 `builds_update_beta_detail` no longer accepts read-only fields `internal_build_state` or `external_build_state`.
  • v3.0.0 Removed public prefixes `offer_codes_*`, `intro_offers_*`, `promo_offers_*`, and `winback_*` from v3 worker schema.

Beta — feedback welcome: [email protected]