Heimdall generates all 875 tools from Apple's official OpenAPI spec, a coverage level rare among App Store Connect MCP servers, and uniquely adds StoreKit 2 support. Its profile system keeps token costs manageable, and confirm-before-write plus local Keychain key storage reflect a security-first design. Limitations: local stdio only, requires Node, and 2.x introduced breaking profile changes. Best for developers seriously managing App Store releases; not for those wanting an official or remotely hosted solution.
Heimdall is a locally-run (stdio) MCP server for the Apple App Store Connect API and the App Store Server API (StoreKit 2). Every tool is generated from Apple's official OpenAPI specification (v4.4.1, 966 paths, 982 operations), giving 875 tools across 13 profiles and 32 sub-profiles, narrowable further (e.g. monetization:subscription-pricing is 24-27 tools instead of ~200) to save context tokens. It also offers review triage and reply drafting where your own model writes the text — no second API key required. Writes confirm before executing; --read-only, destructive-action annotations and no telemetry are supported; the .p8 key lives in the macOS Keychain, never in plain-text config. Not affiliated with Apple; MIT licensed.
Run npx -y @erayendes/asc-mcp setup. The wizard asks for your API key once, stores it securely (in the macOS Keychain), and registers your chosen profiles with every MCP client on your machine — Claude, Codex, Cursor, Windsurf, VS Code. If an AI agent installs it, the agent adds profiles via register while you run setup yourself for the key. Optional environment variables: ASC_KEY_ID, ASC_ISSUER_ID, ASC_PRIVATE_KEY (secret), ASC_PRIVATE_KEY_PATH, ASC_BUNDLE_ID. Requires Node >= 20.19. Pass a profile as a positional argument (e.g. monetization or monetization:subscription-pricing) to narrow the tool surface.
{"mcpServers":{"heimdall":{"command":"npx","args":["-y","@erayendes/asc-mcp","setup"]}}}