Skip to content

zelentsov-dev/asc-mcp

v3.8.0 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-tools app-store-connect claude in-app-purchase ios macos
+6 more
mcp model-context-protocol subscriptions swift testflight xcode-cloud

Summary

AI summary

Fixed rejection of empty collection-filter arrays and classified 145 previously unclassified optional Apple inputs.

Full changelog

[3.8.0] - 2026-07-20

Changed

  • apps_list now exposes App ID, SKU, related App Store version, version-state, review-submission, platform, and Game Center existence filters from Apple API 4.4.1.
  • apps_list_versions, apps_list_localizations, and app_versions_list now expose their remaining collection ID, version-string, state, platform, locale, and page-size controls while preserving them across next_url requests.
  • app_versions_create and app_versions_update now preserve omission, explicit null, and Boolean values for Apple's deprecated usesIdfa attribute; deprecated Apple inputs are marked in the MCP schemas.

Fixed

  • Reject empty or malformed collection-filter arrays before network access instead of silently dropping invalid values.
  • Bound or explicitly classified all 145 previously unclassified optional Apple inputs associated with Apps and App Lifecycle workflows, including related-resource limits, expansion controls, review-item relationships, and legacy age-rating fields.
  • Limit exact-locale metadata update lookups to one matching localization while retaining the fixed ownership projection.

Compatibility

  • No public MCP tool or required input was added, removed, or renamed; this release adds 20 optional inputs across six existing tools.
  • Existing calls remain valid. Continuation calls that use the new collection filters must repeat the same filter values and effective page size with Apple's returned next_url.
  • The strict contract pin records 2,154 optional Apple inputs: 750 bound, 7 internally controlled, 1,134 intentionally omitted, and 263 still queued for domain review.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track zelentsov-dev/asc-mcp

Get notified when new releases ship.

Sign up free

About zelentsov-dev/asc-mcp

App Store Connect API server with 208 tools for managing apps, builds, TestFlight, subscriptions, reviews, and more — directly from any MCP client.

All releases →

Related context

Earlier breaking changes

  • v3.1.0 `app_versions_set_review_details.attachment_file_id` replaced by separate `review_attachments_upload` call.
  • v3.1.0 Moved app-level TestFlight contact and policy metadata from `builds_set_beta_localization` to corresponding `beta_app_*_localization` tools.
  • v3.1.0 `builds_update_beta_detail` no longer accepts read-only fields `internal_build_state` or `external_build_state`.
  • v3.0.0 Removed public prefixes `offer_codes_*`, `intro_offers_*`, `promo_offers_*`, and `winback_*` from v3 worker schema.

Beta — feedback welcome: [email protected]