Skip to content

zelentsov-dev/asc-mcp

v4.1.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 6d MCP SaaS Integrations
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-tools app-store-connect claude in-app-purchase ios macos
+6 more
mcp model-context-protocol subscriptions swift testflight xcode-cloud

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Updates Verification, Safety and compatibility, and Highlights across a mixed release.

Full changelog

Highlights

  • Adds 12 Xcode Cloud tools for workflow create, update, and guarded deletion; guarded product deletion; and related app, repository, version, and build-run reads.
  • Hardens all 30 existing Xcode Cloud tools against the pinned Apple App Store Connect OpenAPI 4.4.1 contract, including filters, includes, sort, scoped pagination, nested limits, response lineage, and included-resource validation.
  • Refuses App Store Connect redirects globally so authenticated requests are never replayed to a redirected destination.

Safety and compatibility

  • Expands the public catalog from 490 to 502 tools without removing or renaming an existing tool or worker filter.
  • Preserves existing Xcode Cloud projection keys and array shapes; new *Present fields distinguish omitted arrays from present empty arrays.
  • Prevents ambiguous build-start replay and requires fresh preview receipts plus exact inventory confirmation before product or workflow deletion.
  • Accounts for all 1,263 Apple operations: 476 mapped, 424 explicitly deferred, and 363 scoped out. All 2,905 optional inputs are classified with zero unclassified entries.

Verification

  • Feature, develop, promotion, main, and annotated-tag CI passed.
  • Debug and Release builds passed with zero Release warnings.
  • App Store Connect operation contract and generated OpenAPI coverage passed against Apple OpenAPI 4.4.1.
  • All 1,735 tests passed.
  • A clean Mint install of v4.1.0 passed real MCP initialize, tools/list, and structured-error smoke checks with exactly 502 tools.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track zelentsov-dev/asc-mcp

Get notified when new releases ship.

Sign up free

About zelentsov-dev/asc-mcp

App Store Connect API server with 208 tools for managing apps, builds, TestFlight, subscriptions, reviews, and more — directly from any MCP client.

All releases →

Related context

Earlier breaking changes

  • v3.1.0 `app_versions_set_review_details.attachment_file_id` replaced by separate `review_attachments_upload` call.
  • v3.1.0 Moved app-level TestFlight contact and policy metadata from `builds_set_beta_localization` to corresponding `beta_app_*_localization` tools.
  • v3.1.0 `builds_update_beta_detail` no longer accepts read-only fields `internal_build_state` or `external_build_state`.
  • v3.0.0 Removed public prefixes `offer_codes_*`, `intro_offers_*`, `promo_offers_*`, and `winback_*` from v3 worker schema.

Beta — feedback welcome: [email protected]