This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+6 more
Affected surfaces
Summary
AI summaryHardened Apps and App Store workflows, corrected IAP/subscription endpoints, fixed Swift 6 compilation regressions, and added new tooling for phased-release removal.
Full changelog
Added
- Added
app_versions_delete_phased_releasefor removing an App Store phased-release configuration. All existing tool names remain available, bringing the public surface to 390 tools. - Added schema-v2 accounting for optional Apple query and request-body inputs, backed by an identity-pinned strict contract gate.
- Expanded credential-free contract and MCP regression coverage across metadata, analytics, reviews, metrics, provisioning, pricing, TestFlight, commerce, marketing, and app lifecycle workflows.
Changed
- Hardened Apps and App Store version workflows with current state and platform fields, ownership validation, deterministic pagination, nullable metadata updates, included relationships, and complete media traversal.
- Aligned TestFlight administration, beta feedback, build processing, pre-release versions, and Xcode Cloud request and response contracts with App Store Connect API 4.4.1.
- Corrected IAP, subscription, offer-code, price-schedule, and territory-availability workflows, including inline manual prices, relationship pagination, truncation metadata, environment-aware one-time codes, and lossless CSV values.
- Expanded analytics, reviews, users, webhooks, metrics, provisioning, App Info, accessibility, and App Events with Apple’s current filters, includes, limits, relationships, and response fields.
- Corrected custom product page templates, screenshot and preview parent relationships, promoted-purchase targeting, and Product Page Optimization projections including visionOS.
Fixed
- Preserved omission, explicit values, and explicit
nullacross supported nullable updates, while rejecting malformed and no-op writes before network access. - Corrected customer-review response lookup so a relationship
404is treated as absent only after confirming that the parent review exists. - Prevented app/version ownership mismatches, pagination-scope drift, incomplete metadata selection, and swallowed screenshot or preview errors.
- Corrected subscription and IAP one-time-code endpoints and response media types, Xcode Cloud provider and test-result projections, webhook signature output nullability, custom-page state projection, and sandbox-tester relationship typing.
- Fixed Swift 6 compilation regressions in the Apps and IAP contract handlers.
Compatibility
- No existing MCP tool was removed. New scalar-or-array filter forms retain the existing scalar call shape.
app_versions_list.statesremains available as a deprecated compatibility filter; useapp_version_statesfor Apple’s currentappVersionState.- One-time-code value tools now return Apple’s non-paginated CSV losslessly through
values_csv,media_type, andbyte_count; unsupported pagination inputs are no longer exposed. - Unsupported App Event values, noncanonical IAP types, ambiguous Xcode Cloud run selectors, ambiguous promoted-purchase product targets, malformed arrays, and empty updates now fail locally instead of issuing an invalid Apple request.
- IAP types follow Apple’s current values:
CONSUMABLE,NON_CONSUMABLE, andNON_RENEWING_SUBSCRIPTION; auto-renewable products belong to the subscription tools. - Legacy single-price, manual-price-ID, and territory-relationship inputs remain supported alongside the new inline pricing and availability forms.
- The v3.2.0 strict pin records 2,154 optional Apple inputs: 706 bound, 6 internally controlled, 965 intentionally omitted after review, and 477 queued for later domain review.
- The manifest reports 382 partial and 8 deprecated tools; v3.2.0 does not claim complete parity with all 1,263 Apple operations.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About zelentsov-dev/asc-mcp
App Store Connect API server with 208 tools for managing apps, builds, TestFlight, subscriptions, reviews, and more — directly from any MCP client.
Related context
Related tools
Earlier breaking changes
- v3.1.0 `app_versions_set_review_details.attachment_file_id` replaced by separate `review_attachments_upload` call.
- v3.1.0 Moved app-level TestFlight contact and policy metadata from `builds_set_beta_localization` to corresponding `beta_app_*_localization` tools.
- v3.1.0 `builds_update_beta_detail` no longer accepts read-only fields `internal_build_state` or `external_build_state`.
- v3.0.0 Removed public prefixes `offer_codes_*`, `intro_offers_*`, `promo_offers_*`, and `winback_*` from v3 worker schema.
Beta — feedback welcome: [email protected]