v2.4.0

Summary

v2.4.0 adds local, read-only webhook receiver helpers on top of the existing App Store Connect webhook management tools.

Added

• webhooks_verify_signature verifies Apple x-apple-signature HMAC-SHA256 values against the exact raw request body.
• webhooks_parse_payload parses webhook envelopes and direct Apple event payloads, including nested event payload JSON.
• webhooks_triage_event produces severity, next steps, and recommended MCP tool calls for build, version, beta feedback, and delivery failure scenarios.

Changed

• WebhooksWorker now exposes 11 tools; the server exposes 348 tools across 36 worker domains.
• Read-only mode now explicitly allows local *_verify, *_parse, and *_triage tools.
• README, CHANGELOG, SECURITY, runtime server version, coverage matrix, and generated OpenAPI coverage report are aligned to v2.4.0.

Verification

• swift build
• swift build -c release with zero warning: lines
• swift test — 498 tests passed
• git diff --check

v2.3.0

Highlights

• Adds App Store accessibility declaration tools via the new accessibility_* worker family.
• Supports listing, reading, creating, updating/publishing, deleting, and relationship-only listing of accessibility declarations by device family.
• Updates tool counts, worker filtering docs, coverage matrix, generated OpenAPI coverage report, SECURITY policy, and runtime server version for 2.3.0.
• Keeps the change additive: existing tool names, schemas, and runtime behavior remain compatible.

Verification

• swift build
• swift build -c release with no warning: entries
• swift test — 494 tests / 43 suites
• git diff --check
• asc-mcp openapi-coverage regenerated from Apple App Store Connect API 4.3

v2.2.0

Highlights

• Updates the public server version to 2.2.0 and aligns README, CHANGELOG, SECURITY, and install examples with the new release tag.
• Adds OpenAPI coverage tooling via asc-mcp openapi-coverage, using Apple's official App Store Connect OpenAPI JSON without loading ASC credentials or starting the MCP server.
• Includes the generated Apple App Store Connect API 4.3 coverage report with 923 paths, 1208 operations, and zero unclassified paths.
• Carries forward the recent 2.1.0 production modernization: MCP 2025-11-25 metadata, structured results, read-only mode, Webhooks, Beta Feedback, Xcode Cloud, safer errors, upload streaming, and expanded tests.

Verification

• swift build
• swift build -c release with no warning: entries
• swift test — 488 tests / 42 suites
• asc-mcp openapi-coverage smoke against the local OpenAPI fixture

v1.4.0

Public Release Preparation

Changed

• Fixed tool counts across README, CLAUDE.md, and tests
• Documented vendor_number configuration for analytics tools
• Updated contact email in CODE_OF_CONDUCT.md and SECURITY.md

Added

• CONTRIBUTING.md — contribution guide with code conventions and PR checklist
• GitHub issue templates (bug report, feature request) and PR template
• CI badge in README
• CHANGELOG entries for all versions (1.0.0–1.4.0)

Removed

• Internal working documents (ROADMAP, AUDIT_REPORT, AUDIT_PLAN, REF_PLAN, WORKERS_API_MAPPING)

v1.3.0

Added

• app_versions_get_phased_release tool — get phased release info and ID
• Territory schedules in app_versions_update
• Unified locale/territory descriptions across all workers
• 208 tools total

1.2.0

What's Changed

Fixes (post-audit)

• Remove duplicate metrics_list_diagnostics (was identical to metrics_build_diagnostics)
• Mark name as required in app_info_create_localization (API returns 409 without it)
• Fix app_versions_list state filter (was using wrong API parameter)
• Prefer iOS over macOS in apps_get_metadata auto-version selection

Features

• subscriptions_list_prices now returns actual price amounts (USD, EUR, etc.) instead of opaque price point IDs
• promoted_get now includes linked IAP/subscription product info

Docs

• Improve tool descriptions for accuracy and clarity
• Translate all project documentation to English

v1.1.1

Fixed

• Removed relative companies.json from default config paths (security improvement)

v1.1.0

8 New Workers + 77 New Tools

Added

• SubscriptionsWorker (15 tools), OfferCodesWorker (7), WinBackOffersWorker (5), ScreenshotsWorker (12), CustomProductPagesWorker (10), ProductPageOptimizationWorker (9), PromotedPurchasesWorker (5), MetricsWorker (4)
• analytics_app_summary, app_info_delete_localization, analytics_check_snapshot_status
• Gzip TSV report decoding into structured JSON
• vendorNumber in company config

Fixed

• 19 API bugs across 6 workers (metrics, PPO, offer codes, win-back, custom pages, promoted)

v1.0.0 — Initial Public Release

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

[1.0.0] - 2025-02-17

Added

• 17 workers with ~109 tools covering the full App Store Connect API
• Multi-account support via companies.json configuration
• Worker filtering with --workers flag for tool-limited MCP clients
• JWT authentication with ES256 signing and automatic 20-minute refresh
• HTTP client as actor with retry logic, 429 rate-limit handling, and idempotent request support
• Pagination helper for traversing large API result sets

Workers

• CompaniesWorker (3 tools) — multi-account management, switching, listing
• AuthWorker (4 tools) — JWT token generation, validation, refresh
• AppsWorker (9 tools) — app listing, metadata, localized descriptions, keywords
• BuildsWorker (4 tools) — build listing, details, individual build info
• BuildBetaDetailsWorker (9 tools) — TestFlight localizations, beta groups, notifications
• BuildProcessingWorker (5 tools) — build states, encryption declarations
• AppLifecycleWorker (12 tools) — version create/submit/release, phased rollout
• ReviewsWorker (8 tools) — customer reviews, responses, statistics
• BetaGroupsWorker (9 tools) — TestFlight groups CRUD, testers, builds
• BetaTestersWorker (6 tools) — tester management, search, invite
• InAppPurchasesWorker (12 tools) — IAP and subscriptions CRUD, localizations, submit
• ProvisioningWorker (17 tools) — bundle IDs, devices, certificates, profiles, capabilities
• AppInfoWorker (6 tools) — app info, categories, age rating, localizations
• PricingWorker (6 tools) — territories, availability, price points and schedules
• UsersWorker (6 tools) — team members, roles, invitations
• AppEventsWorker (6 tools) — in-app events CRUD, localizations
• AnalyticsWorker (4 tools) — sales reports, financial reports, analytics

Security

• SSRF protection for pagination URL validation
• Sensitive credential masking in MCP responses
• HTTPS-only communication with App Store Connect API
• JWT tokens held in memory only, never persisted

Testing

• 295+ unit tests using Swift Testing framework
• Test fixtures with placeholder credentials (no real keys)