appstore-api-mcp 1.0.2 → 1.0.4

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/) and the project uses
 [Semantic Versioning](https://semver.org/).
 
+## [1.0.4] - 2026-06-02
+
+### Changed
+- Agent-setup prompt now **guides the user to obtain missing credentials**
+  (where to find the Key ID / Issuer ID, how to generate and download the .p8)
+  instead of stopping with an error when values are still placeholders.
+
+## [1.0.3] - 2026-06-02
+
+### Changed
+- README Quick start reworked to be agent-agnostic: the **agent-setup prompt is
+  now shown inline**, and manual setup leads with the universal config block
+  (Claude Code is presented as one shortcut among equals, not the default).
+
+### Fixed
+- Publish workflow now triggers on tag push **only** (removed the duplicate
+  `release: published` trigger that caused a second, failing publish run), and
+  skips publishing if the version is already on npm.
+
 ## [1.0.2] - 2026-06-02
 
 ### Added

package/README.md

@@ -39,33 +39,54 @@ versions — plus a raw-request tool that reaches the **entire**
 **Requirements:** Node.js ≥ 18 and an Apple Developer account with an
 [App Store Connect API key](#getting-your-api-key).
 
-### 🤖 Easiest: let your agent set it up
-
-Don't want to touch config files? Paste the prompt in
-**[docs/AGENT-SETUP.md](docs/AGENT-SETUP.md)** into your coding agent, give it
-your Key ID, Issuer ID, and the **path** to your `.p8` file, and it configures
-everything for your client and verifies it. (Give the file *path*, not the key
-contents — that keeps the key off the transcript.)
-
-Prefer to do it manually? Continue below.
+### 🤖 Easiest: let your AI agent set it up (works with any agent)
+
+Don't want to touch config files? Paste this into your coding agent (Claude,
+Codex, Cursor, Windsurf, Antigravity, Gemini CLI, …), fill in your three values,
+and it will configure your client and verify it:
+
+```text
+Set up the "appstore-api-mcp" App Store Connect MCP server for me.
+
+My App Store Connect API credentials:
+- Key ID:    <YOUR_KEY_ID>
+- Issuer ID: <YOUR_ISSUER_ID>
+- Path to my .p8 private key file: <ABSOLUTE_PATH_TO_AuthKey_XXXX.p8>
+
+Please:
+1. If any of the three values above are still placeholders or I didn't provide
+   them, do NOT stop with an error — guide me to get them, then wait for me:
+     - Key ID & Issuer ID: go to App Store Connect → Users and Access →
+       Integrations tab → "App Store Connect API". The Issuer ID is shown at the
+       top of that page; the Key ID is listed next to each key.
+     - No key yet? Click the + to generate one, give it the "App Manager" role
+       (enough to edit metadata/keywords/screenshots), then Download the .p8
+       file — you can only download it once, so save it somewhere safe.
+     - The .p8 path is the absolute path to wherever you saved that file.
+2. Detect which MCP client I'm using and add the server to its config (run it
+   with: npx -y appstore-api-mcp).
+3. Pass these env vars: ASC_KEY_ID, ASC_ISSUER_ID, and ASC_PRIVATE_KEY_PATH
+   (point ASC_PRIVATE_KEY_PATH at my .p8 path — reference the PATH, do not
+   inline the key contents).
+4. Install it at user/global scope (for Claude Code use `--scope user`).
+5. Do NOT print, echo, log, or commit the key. Keep the .p8 outside any git repo.
+6. When done, verify by listing my App Store apps and report the result.
+
+Config formats per client: https://github.com/fil-technology/appstore-api-mcp/blob/main/docs/CLIENTS.md
+```
 
-### Claude Code (CLI)
+> Give the file **path**, not the key contents — that keeps the private key off
+> the chat transcript. More detail + a remote/cloud variant in
+> [docs/AGENT-SETUP.md](docs/AGENT-SETUP.md).
 
-```bash
-# --scope user installs it for ALL your projects (recommended).
-# Remove the --scope user line to install for the current project only.
-claude mcp add appstore-api \
-  --scope user \
-  --env ASC_KEY_ID=YOUR_KEY_ID \
-  --env ASC_ISSUER_ID=YOUR_ISSUER_ID \
-  --env ASC_PRIVATE_KEY_PATH=/absolute/path/to/AuthKey_XXXXXXXXXX.p8 \
-  -- npx -y appstore-api-mcp
-```
+Prefer to do it manually? See below.
 
-### Any other MCP client (Cursor, Cline, Windsurf, VS Code, Zed, Continue, …)
+### Manual setup — any MCP client
 
-Almost every client uses this same block (Claude Desktop config path:
-`~/Library/Application Support/Claude/claude_desktop_config.json`):
+This is a standard stdio MCP server, so **every** MCP client uses the same
+command (`npx -y appstore-api-mcp`) and the same three `ASC_*` env vars. Most
+clients (Cursor, Cline, Windsurf, Claude Desktop, Gemini CLI, Antigravity, …)
+take this exact block — just put it in that client's config file:
 
 ```json
 {
@@ -83,7 +104,24 @@ Almost every client uses this same block (Claude Desktop config path:
 }
 ```
 
-Restart the client, then ask it to *"list my App Store apps"* to confirm it works.
+A few clients differ (VS Code uses `servers`, Codex uses TOML, Zed uses
+`context_servers`) — see the [Supported clients](#supported-clients) table and
+[docs/CLIENTS.md](docs/CLIENTS.md) for each exact format/location.
+
+**Claude Code** has a one-line CLI shortcut instead of editing a file:
+
+```bash
+# --scope user installs it for ALL your projects (recommended).
+# Remove the --scope user line to install for the current project only.
+claude mcp add appstore-api \
+  --scope user \
+  --env ASC_KEY_ID=YOUR_KEY_ID \
+  --env ASC_ISSUER_ID=YOUR_ISSUER_ID \
+  --env ASC_PRIVATE_KEY_PATH=/absolute/path/to/AuthKey_XXXXXXXXXX.p8 \
+  -- npx -y appstore-api-mcp
+```
+
+After configuring, restart the client and ask it to *"list my App Store apps"* to confirm it works.
 
 ---
 

package/docs/AGENT-SETUP.md

@@ -15,17 +15,26 @@ My App Store Connect API credentials:
 - Path to my .p8 private key file: <ABSOLUTE_PATH_TO_AuthKey_XXXX.p8>
 
 Please:
-1. Detect which MCP client I'm using and add the server to that client's
+1. If any of the three values above are still placeholders or I didn't provide
+   them, do NOT stop with an error — guide me to get them, then wait for me:
+     - Key ID & Issuer ID: go to App Store Connect → Users and Access →
+       Integrations tab → "App Store Connect API". The Issuer ID is shown at the
+       top of that page; the Key ID is listed next to each key.
+     - No key yet? Click the + to generate one, give it the "App Manager" role
+       (enough to edit metadata/keywords/screenshots), then Download the .p8
+       file — you can only download it once, so save it somewhere safe.
+     - The .p8 path is the absolute path to wherever you saved that file.
+2. Detect which MCP client I'm using and add the server to that client's
    correct config file/command. Run it with: npx -y appstore-api-mcp
-2. Pass these env vars to the server:
+3. Pass these env vars to the server:
      ASC_KEY_ID         = my Key ID
      ASC_ISSUER_ID      = my Issuer ID
      ASC_PRIVATE_KEY_PATH = the path to my .p8 file (reference the PATH; do not
                             inline the key contents)
-3. Install it at user/global scope so it's available in all my projects
+4. Install it at user/global scope so it's available in all my projects
    (for Claude Code, use `claude mcp add ... --scope user`).
-4. Do NOT print, echo, log, or commit the key. Keep the .p8 outside any git repo.
-5. When done, verify it works by listing my App Store apps, then tell me the
+5. Do NOT print, echo, log, or commit the key. Keep the .p8 outside any git repo.
+6. When done, verify it works by listing my App Store apps, then tell me the
    result (or any error and how to fix it).
 
 Config formats per client are documented here:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appstore-api-mcp",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "MCP server for Apple App Store Connect — manage apps, keywords, descriptions, titles, screenshots, versions and the full API from any MCP client (Claude, Codex, Cursor, Cline, Windsurf, VS Code, Zed, Continue, Gemini CLI, Google Antigravity, Amazon Q, Goose, and custom agents). Includes a fleet-wide ASO audit and dry-run previews.",
   "type": "module",
   "bin": {