STOMP — MCP Server for App Store Connect

Give Claude, Cursor, Windsurf, and other AI coding agents full access to the Apple App Store Connect API — 162 tools covering every major endpoint.

What is STOMP?

STOMP is a Model Context Protocol (MCP) server for Apple's App Store Connect API. It lets AI assistants manage your iOS, macOS, tvOS, and visionOS apps — TestFlight, builds, in-app purchases, subscriptions, App Store submissions, analytics, certificates, provisioning profiles, Game Center, Xcode Cloud, App Clips, sandbox testing, reviews, screenshots, pricing, and more. 162 dedicated tools plus a generic api_request escape hatch for any endpoint not yet covered.

Prerequisites

• Node.js 18+
• An Apple Developer account with access to App Store Connect
• An App Store Connect API key (.p8 file) with appropriate permissions

Getting your API key

1. Sign in to App Store Connect
2. Go to Users and Access > Integrations > App Store Connect API
3. Click Generate API Key (or request one from your Account Holder)
4. Choose a name and select the role/permissions the key should have
5. Click Generate
6. Download the .p8 file -- Apple only lets you download it once, so store it somewhere safe
7. Note the Key ID shown in the table and the Issuer ID at the top of the page -- you'll need both

Installation

Install globally:

npm install -g @seriousmonster/app-store-connect-mcp

Or run directly without installing:

npx @seriousmonster/app-store-connect-mcp

Configuration

STOMP requires three environment variables:

Claude Code

claude mcp add app-store-connect \
  -e APP_STORE_CONNECT_KEY_ID=YOUR_KEY_ID \
  -e APP_STORE_CONNECT_ISSUER_ID=YOUR_ISSUER_ID \
  -e APP_STORE_CONNECT_P8_PATH=~/.keys/AuthKey_YOUR_KEY_ID.p8 \
  -- npx @seriousmonster/app-store-connect-mcp

Cursor

Add to your Cursor MCP config (~/.cursor/mcp.json):

{
  "mcpServers": {
    "app-store-connect": {
      "command": "npx",
      "args": ["@seriousmonster/app-store-connect-mcp"],
      "env": {
        "APP_STORE_CONNECT_KEY_ID": "YOUR_KEY_ID",
        "APP_STORE_CONNECT_ISSUER_ID": "YOUR_ISSUER_ID",
        "APP_STORE_CONNECT_P8_PATH": "~/.keys/AuthKey_YOUR_KEY_ID.p8"
      }
    }
  }
}

Generic MCP client

Any MCP-compatible client (Claude Desktop, Cline, Zed, etc.) can run STOMP. Set the three environment variables and run npx @seriousmonster/app-store-connect-mcp as the server command.

Available tools

Apps

App Store Versions

Localizations

TestFlight (Beta)

Builds

Bundle IDs

Capabilities

Submissions

Users & Devices

Reviews

Screenshots & Previews

Analytics & Reporting

Pricing & Territories

TestFlight (Advanced)

Certificates & Profiles

App Info & Categories

Phased Releases

In-App Purchases

Subscriptions

Game Center

Xcode Cloud

App Clips

Sandbox Testing

Compliance & Legal

App Events

Generic

The api_request escape hatch

The 162 dedicated tools cover the vast majority of the App Store Connect API, but Apple's API surface is enormous. The api_request tool lets you hit any endpoint directly for anything that doesn't have a dedicated tool yet.

You provide:

• method -- GET, POST, PATCH, or DELETE
• path -- the API path, e.g. /v1/apps, /v2/inAppPurchases/{id}
• params (optional) -- query parameters as key-value pairs
• body (optional) -- a JSON string for POST/PATCH requests, following Apple's JSON:API format

Authentication is handled automatically. Refer to Apple's API documentation for available endpoints and request formats.

License

MIT