v1.4.0

Public Release Preparation

Changed

• Fixed tool counts across README, CLAUDE.md, and tests
• Documented vendor_number configuration for analytics tools
• Updated contact email in CODE_OF_CONDUCT.md and SECURITY.md

Added

• CONTRIBUTING.md — contribution guide with code conventions and PR checklist
• GitHub issue templates (bug report, feature request) and PR template
• CI badge in README
• CHANGELOG entries for all versions (1.0.0–1.4.0)

Removed

• Internal working documents (ROADMAP, AUDIT_REPORT, AUDIT_PLAN, REF_PLAN, WORKERS_API_MAPPING)

v1.3.0

Added

• app_versions_get_phased_release tool — get phased release info and ID
• Territory schedules in app_versions_update
• Unified locale/territory descriptions across all workers
• 208 tools total

1.2.0

What's Changed

Fixes (post-audit)

• Remove duplicate metrics_list_diagnostics (was identical to metrics_build_diagnostics)
• Mark name as required in app_info_create_localization (API returns 409 without it)
• Fix app_versions_list state filter (was using wrong API parameter)
• Prefer iOS over macOS in apps_get_metadata auto-version selection

Features

• subscriptions_list_prices now returns actual price amounts (USD, EUR, etc.) instead of opaque price point IDs
• promoted_get now includes linked IAP/subscription product info

Docs

• Improve tool descriptions for accuracy and clarity
• Translate all project documentation to English

v1.1.1

Fixed

• Removed relative companies.json from default config paths (security improvement)

v1.1.0

8 New Workers + 77 New Tools

Added

• SubscriptionsWorker (15 tools), OfferCodesWorker (7), WinBackOffersWorker (5), ScreenshotsWorker (12), CustomProductPagesWorker (10), ProductPageOptimizationWorker (9), PromotedPurchasesWorker (5), MetricsWorker (4)
• analytics_app_summary, app_info_delete_localization, analytics_check_snapshot_status
• Gzip TSV report decoding into structured JSON
• vendorNumber in company config

Fixed

• 19 API bugs across 6 workers (metrics, PPO, offer codes, win-back, custom pages, promoted)

v1.0.0 — Initial Public Release

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

[1.0.0] - 2025-02-17

Added

• 17 workers with ~109 tools covering the full App Store Connect API
• Multi-account support via companies.json configuration
• Worker filtering with --workers flag for tool-limited MCP clients
• JWT authentication with ES256 signing and automatic 20-minute refresh
• HTTP client as actor with retry logic, 429 rate-limit handling, and idempotent request support
• Pagination helper for traversing large API result sets

Workers

• CompaniesWorker (3 tools) — multi-account management, switching, listing
• AuthWorker (4 tools) — JWT token generation, validation, refresh
• AppsWorker (9 tools) — app listing, metadata, localized descriptions, keywords
• BuildsWorker (4 tools) — build listing, details, individual build info
• BuildBetaDetailsWorker (9 tools) — TestFlight localizations, beta groups, notifications
• BuildProcessingWorker (5 tools) — build states, encryption declarations
• AppLifecycleWorker (12 tools) — version create/submit/release, phased rollout
• ReviewsWorker (8 tools) — customer reviews, responses, statistics
• BetaGroupsWorker (9 tools) — TestFlight groups CRUD, testers, builds
• BetaTestersWorker (6 tools) — tester management, search, invite
• InAppPurchasesWorker (12 tools) — IAP and subscriptions CRUD, localizations, submit
• ProvisioningWorker (17 tools) — bundle IDs, devices, certificates, profiles, capabilities
• AppInfoWorker (6 tools) — app info, categories, age rating, localizations
• PricingWorker (6 tools) — territories, availability, price points and schedules
• UsersWorker (6 tools) — team members, roles, invitations
• AppEventsWorker (6 tools) — in-app events CRUD, localizations
• AnalyticsWorker (4 tools) — sales reports, financial reports, analytics

Security

• SSRF protection for pagination URL validation
• Sensitive credential masking in MCP responses
• HTTPS-only communication with App Store Connect API
• JWT tokens held in memory only, never persisted

Testing

• 295+ unit tests using Swift Testing framework
• Test fixtures with placeholder credentials (no real keys)