Yes, there are App Store Connect MCP servers, and for most developers the best free one is asc-mcp: a local, MIT-licensed Swift server for macOS with 502 tools and a --read-only mode. Apple doesn't ship an App Store Connect MCP server; Xcode's MCP bridge exposes Xcode's own tools, not App Store Connect.
Local servers run on your machine with the .p8 key in a file, an environment variable or the Keychain, and they work only while your agent starts them. Hosted servers (Lance, App Listing Agent, MetaRun) hold the key on the vendor's side and give your agent an OAuth sign-in or a revocable token, which is what lets them work unattended. Free and local is the right call for most solo developers. Hosted makes sense when jobs should run without your Mac, when teammates shouldn't hold the key, or when you want work an API wrapper doesn't do.
Stars, licenses, versions and tool counts below were checked against each repository or site on 2026-10-12. Tool counts don't compare well: one server's single tool can do what another splits into ten.
By Redjan Hysa, founder of MetaRun · Facts checked October 12, 2026
| Tool | What it is | Price | Where your Apple key lives | Changes in App Store Connect |
|---|---|---|---|---|
| asc-mcp (zelentsov-dev) | Local MCP server (Swift, macOS) | Free (MIT) | On your Mac: a .p8 path in ~/.config/asc-mcp/companies.json, or environment variables | Yes. --read-only blocks every mutating tool before it runs. Many deletes need an exact confirmation id; other writes rely on your agent's prompt. |
| asc CLI with agent skills | Open-source CLI (not MCP) | Free (MIT) | On each machine: the macOS Keychain by default, or a config file for CI | Yes, as shell commands. Publishing and destructive commands need --confirm; several support --dry-run. |
| appstoreconnect-mcp (akoskomuves) | Local MCP server (Node, npx) | Free (MIT) | On your machine: its init wizard copies the .p8 to ~/.appstore/ with chmod 600 | Yes, broad coverage. Its PPP pricing apply asks through MCP elicitation (or takes confirm: true unattended) and re-reads prices before writing. |
| appstore-mcp (forgeopslabs) | Local MCP server (Rust binary) | Free (MIT, per Cargo.toml) | On your machine: a .p8 path or the key text in environment variables | Yes, 114 tools with MCP annotations. ASC_READ_ONLY=1 serves only its 35 read tools. |
| mcp-asc (beautyfree) | Local MCP server (Node, npx) | Free (MIT, per npm) | On your machine: a .p8 path in environment variables | Yes: versions, subscriptions and prices, TestFlight testers, review replies, submission. No server-side confirmation is documented. |
| appstore-connect-mcp (ryaker) | Local MCP server (Node, npx); can be self-hosted | Free (MIT) | In your MCP client config, as the .p8 text in an environment variable | Some: localizations and release notes, TestFlight testers. No read-only mode documented. |
| app-store-connect-mcp (cankoseoglu) | Local MCP server (Node, from source) | Free (MIT) | On your machine: a .p8 path or the key text in environment variables | Yes: 73 tools, with read-only, idempotent and destructive annotations. |
| app-store-connect-mcp-server (JoshuaRileyDev) | Local MCP server (Node), archived | Free (MIT) | On your machine: a .p8 path in environment variables | Some: beta testers, localizations, bundle IDs, devices. |
| Itsyconnect | Free Mac app with a local MCP server | Free (MIT) | On your Mac, AES-256-GCM encrypted with the master key in the Keychain | Listing fields through 4 high-level tools. Respects the app's diff mode, so changes can wait for review; removing a locale needs confirm. |
| Blitz | Free Mac app with a local MCP server | Free (Apache 2.0) | On your Mac; the MCP server binds to 127.0.0.1 | Yes, about 35 tools: IAPs, screenshots, TestFlight, submission, plus iOS Simulator control. |
| Xcode MCP bridge (Apple) | Apple's MCP server for Xcode | Free with Xcode | No App Store Connect key involved | Changes and builds your open Xcode project. No App Store Connect tools. |
| Lance | Hosted MCP server with an autonomous operator | 500 free credits for 30 days, no card; Pro $40/mo with 2,000 credits | Connected once and held by Lance's operator; the .p8 never enters the conversation | Yes, by delegation: your agent hands a task to Lance's operator, which works in the background. Apple ID sign-in and the final Submit happen only on your explicit request. |
| App Listing Agent (formerly AppStore Copilot) | Hosted MCP server | Solo $99/mo or $990/yr; 7-day trial, card required | Held by the service, encrypted, with project-scoped access | Yes, after a dry run: nothing ships until you approve it. |
| MetaRun | Hosted MCP server plus web platform | MCP on Pro ($39/mo) and Studio ($99/mo); 14-day trial includes it, no card | Uploaded once, envelope-encrypted on MetaRun's servers; agents hold revocable MetaRun tokens | Every write is a preview (before/after), then an apply with a confirm token that refuses if the store drifted. Changes go into a history and most can be reverted. |
Local MCP server (Swift, macOS)
Free (MIT)
Best for: The widest free coverage: releases, TestFlight, IAPs, subscriptions, Xcode Cloud, provisioning, and several App Store Connect teams in one server.
Limits: macOS only; Linux and Windows aren't supported. Installs with Mint or a Swift 6.2 build.
Open-source CLI (not MCP)
Free (MIT)
Best for: Agents that already run shell commands (Claude Code, Codex), and anything build-side: signing, upload, Xcode Cloud, CI.
Limits: Chat-only clients can't run it. The agent composes flags from skills and parses the output. No undo.
Local MCP server (Node, npx)
Free (MIT)
Best for: Repricing subscriptions and IAPs by purchasing power from a free local server.
Limits: No read-only mode documented. Pricing writes need an Admin key.
Local MCP server (Rust binary)
Free (MIT, per Cargo.toml)
Best for: One prebuilt binary for macOS, Linux or Windows, plus a one-click Claude Desktop bundle.
Limits: Two generic tools can call any endpoint, which is handy and easy to misuse. Created in June 2026.
Local MCP server (Node, npx)
Free (MIT, per npm)
Best for: A quick npx setup with a Cursor install link and stdio or local HTTP transport.
Limits: No read-only mode. No code pushed since 2026-04-27.
Local MCP server (Node, npx); can be self-hosted
Free (MIT)
Best for: A simple npx server, or one you host yourself behind OAuth (Auth0).
Limits: Narrower coverage than asc-mcp. The npm package dates from 2025-09-10.
Local MCP server (Node, from source)
Free (MIT)
Best for: A mid-size server that also covers Game Center and Xcode Cloud.
Limits: Not on npm, so you clone and build it. No push since 2026-02-22.
Local MCP server (Node), archived
Free (MIT)
Best for: Reading its code. It's the most-starred standalone server here.
Limits: Archived on GitHub, so no fixes. Last push and npm release 2025-09-02; Apple API changes since then aren't in it.
Free Mac app with a local MCP server
Free (MIT)
Best for: Localizing listings from an agent, with a GUI to check the result.
Limits: No TestFlight, pricing or submission tools. Listens on 127.0.0.1:3100 only while the app is open.
Free Mac app with a local MCP server
Free (Apache 2.0)
Best for: Taking a first app through submission with an agent while you watch in a GUI.
Limits: macOS 14 or later. Latest release v1.0.35 from 2026-04-15.
Apple's MCP server for Xcode
Free with Xcode
Best for: Letting Claude Code or Codex build through Xcode, next to an App Store Connect server.
Limits: Turn on Allow external agents to use Xcode tools in Xcode's Intelligence settings, and keep the project open.
Hosted MCP server with an autonomous operator
500 free credits for 30 days, no card; Pro $40/mo with 2,000 credits
Best for: Handing off whole jobs (TestFlight builds, listings, IAPs, rejection fixes).
Limits: Credit-metered. You review the operator's results rather than approving each API call. Apple only.
Hosted MCP server
Solo $99/mo or $990/yr; 7-day trial, card required
Best for: Generating screenshot sets, localized metadata, icons and custom product pages for the App Store and Google Play.
Limits: The priciest entry plan here. Solo covers 3 apps and 30 screenshot credits a month.
Hosted MCP server plus web platform
MCP on Pro ($39/mo) and Studio ($99/mo); 14-day trial includes it, no card
Best for: Work an API wrapper doesn't do: PPP, Big Mac and Spotify price ladders snapped to Apple price points across 175 storefronts, rendered localized screenshot sets, AI-assistant visibility checks, background jobs, and the same tools in a web UI and the MILO operator.
Limits: Your key on a third-party server. Paid. Apple only for now. No builds, signing or uploads. New in 2026, not open source, no public user count.
You're solo, on a Mac, and want the most coverage for free
asc-mcp
Your agent runs shell commands and you also script builds and uploads
asc CLI with its skills
You need Linux or Windows, or a read-only server to evaluate with
appstore-mcp (forgeopslabs)
You want subscription prices set by purchasing power, free and local
appstoreconnect-mcp (akoskomuves)
You mostly translate listings and want a GUI to check the agent's work
Itsyconnect
You'd rather delegate whole jobs than approve each call
Lance
You want previewed, revertible writes, jobs that run with your Mac off, and pricing or screenshot engines
MetaRun
A local server is a process your agent launches on your machine (stdio), or a localhost port inside a Mac app. The .p8 sits in a file, an environment variable or the Keychain, and nothing runs unless that machine is on and the agent starts it. Revoking access means revoking the Apple key, which Apple says can't be reinstated, then putting a new key on every machine that had the old one.
A hosted server is a URL. You give the vendor the key once and your agent signs in with OAuth or a vendor token. Cutting off one agent means revoking its token; the Apple key stays put. Because the vendor holds the key, it can run scheduled jobs and serve teammates who never see the .p8. The cost is trust: Apple says a team key reaches every app on the account, so a breach at the vendor exposes that key. Ask how it's stored and who can decrypt it.
Two servers have a server-side read-only switch: asc-mcp's --read-only flag and forgeopslabs' ASC_READ_ONLY=1. Use one while you evaluate. Elsewhere read-only is up to your client: allow the read tools and leave writes on ask.
The MCP spec says a human should be able to deny any tool call, and that clients must treat annotations like readOnlyHint as untrusted unless the server is trusted. So the baseline everywhere is your agent's approval prompt. Some servers add a gate of their own: asc-mcp wants exact ids for deletes, akoskomuves asks through elicitation before a pricing apply, Itsyconnect can hold changes in diff mode, App Listing Agent dry-runs first, and MetaRun binds a confirm token to the exact before/after.
onmyway133/appstore-connect-mcp (no license file, a dozen tools, last push 2026-01-09) and devinwang/app-store-connect-mcp (claims 1,200+ tools, 2 stars) are small or early. Runway's hosted MCP server serves its release workflow (rollout status, hotfixes, regression testing), not general App Store Connect editing. LaunchBuddy's local server writes only to its own planner.
Yes, several. Free local ones include asc-mcp (502 tools, macOS), forgeopslabs' appstore-mcp (Rust, any OS), akoskomuves' appstoreconnect-mcp and mcp-asc. Hosted ones include Lance, App Listing Agent and MetaRun. Apple doesn't publish one.
No, not as of 2026-10-12. Apple's MCP support is in Xcode: xcrun mcpbridge lets outside agents work on and build the open project, and Xcode's coding assistant can install plug-ins that bring third-party MCP servers. App Store Connect itself is reachable through Apple's REST API, which every server on this page wraps.
For free and local on a Mac, asc-mcp. On Linux or Windows, forgeopslabs' appstore-mcp. If your agent can run shell commands, the asc CLI with its skills covers the build side too. Pick a hosted server only when you want jobs without your Mac, a key teammates never hold, or features beyond the API.
For a local server, point Claude Code at the binary, for example claude mcp add --transport stdio --scope user asc-mcp -- ~/.mint/bin/asc-mcp. For a hosted one, add the URL: claude mcp add --transport http --scope user metarun https://metarun.dev/api/mcp, then run /mcp and sign in in your browser.
JoshuaRileyDev's (331 stars, archived), zelentsov-dev's asc-mcp (77), ryaker's (45), beautyfree's mcp-asc (13), akoskomuves' (5), forgeopslabs' (2) and cankoseoglu's (0), counted on 2026-10-12. Blitz (1,755) and Itsyconnect (128) are Mac apps that include one.
Neither by default. Local keeps the .p8 on machines you control, but every one of them holds a key that reaches every app, and revoking it means a new key everywhere. Hosted keeps one copy with a vendor and gives agents tokens you can revoke one by one, so the question becomes how well that vendor protects it.
Many can, including asc-mcp, forgeopslabs', mcp-asc, Blitz and MetaRun (which also asks for an explicit acknowledgment). Lance submits only on your explicit request. Read the server's README before you allow its submit tool without a prompt.
Read next
Guide
Create a team or individual key, pick the right role, find the Key ID and Issuer ID, and fix 401 and 403 errors.
MetaRun
Try MetaRun on your own apps: 14-day free trial, no card, and nothing reaches Apple until you approve it.
