This release includes breaking changes for platform teams planning a safe upgrade.
Published 7d
MCP SaaS Integrations
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai-tools
app-store-connect
claude
in-app-purchase
ios
macos
+6 more
mcp
model-context-protocol
subscriptions
swift
testflight
xcode-cloud
Summary
AI summaryFixed rejection of empty collection-filter arrays and classified 145 previously unclassified optional Apple inputs.
Full changelog
[3.8.0] - 2026-07-20
Changed
apps_listnow exposes App ID, SKU, related App Store version, version-state, review-submission, platform, and Game Center existence filters from Apple API 4.4.1.apps_list_versions,apps_list_localizations, andapp_versions_listnow expose their remaining collection ID, version-string, state, platform, locale, and page-size controls while preserving them acrossnext_urlrequests.app_versions_createandapp_versions_updatenow preserve omission, explicit null, and Boolean values for Apple's deprecatedusesIdfaattribute; deprecated Apple inputs are marked in the MCP schemas.
Fixed
- Reject empty or malformed collection-filter arrays before network access instead of silently dropping invalid values.
- Bound or explicitly classified all 145 previously unclassified optional Apple inputs associated with Apps and App Lifecycle workflows, including related-resource limits, expansion controls, review-item relationships, and legacy age-rating fields.
- Limit exact-locale metadata update lookups to one matching localization while retaining the fixed ownership projection.
Compatibility
- No public MCP tool or required input was added, removed, or renamed; this release adds 20 optional inputs across six existing tools.
- Existing calls remain valid. Continuation calls that use the new collection filters must repeat the same filter values and effective page size with Apple's returned
next_url. - The strict contract pin records 2,154 optional Apple inputs: 750 bound, 7 internally controlled, 1,134 intentionally omitted, and 263 still queued for domain review.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About zelentsov-dev/asc-mcp
App Store Connect API server with 208 tools for managing apps, builds, TestFlight, subscriptions, reviews, and more — directly from any MCP client.
Related context
Related tools
Earlier breaking changes
- v3.1.0 `app_versions_set_review_details.attachment_file_id` replaced by separate `review_attachments_upload` call.
- v3.1.0 Moved app-level TestFlight contact and policy metadata from `builds_set_beta_localization` to corresponding `beta_app_*_localization` tools.
- v3.1.0 `builds_update_beta_detail` no longer accepts read-only fields `internal_build_state` or `external_build_state`.
- v3.0.0 Removed public prefixes `offer_codes_*`, `intro_offers_*`, `promo_offers_*`, and `winback_*` from v3 worker schema.
Beta — feedback welcome: [email protected]