appstore-api-mcp 1.10.0 → 1.10.1

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/) and the project uses
 [Semantic Versioning](https://semver.org/).
 
+## [1.10.1] - 2026-06-02
+
+### Changed
+- Surface **Safe mode / read-only** prominently: a headline highlight ("you can
+  run this read-only"), a table-of-contents entry, and a clearer Safe mode intro.
+
 ## [1.10.0] - 2026-06-02
 
 ### Added

package/README.md

@@ -38,6 +38,7 @@ whatever AI agent you already use.
 
 - 🤖 **Any MCP client** — Claude, Codex, Cursor, Windsurf, Antigravity, Gemini CLI, Amazon Q, Goose, Zed, VS Code… → [docs/CLIENTS.md](docs/CLIENTS.md)
 - ⚡ **One-line install** (`npx`, no build) — or paste a prompt and let your agent set it up for you
+- 🛡️ **Safe by choice** — run it **fully read-only** with one env var (`APPSTORE_MCP_READ_ONLY=true`), or block just releases/pricing/review-replies. The server *enforces* it — see [Safe mode](#safe-mode)
 - 🔒 **Keys never leave your machine** — calls go straight to Apple, nothing proxied
 - 📦 **MIT · published with provenance · actively maintained**
 
@@ -48,7 +49,7 @@ whatever AI agent you already use.
 - [Quick start](#quick-start) — incl. [agent-assisted setup](docs/AGENT-SETUP.md)
 - [Supported clients](#supported-clients) → full guide in [docs/CLIENTS.md](docs/CLIENTS.md)
 - [Getting your API key](#getting-your-api-key) → full guide in [docs/SETUP.md](docs/SETUP.md)
-- [Configuration](#configuration)
+- [Configuration](#configuration) — incl. [🛡️ Safe mode (read-only)](#safe-mode)
 - [Tools](#tools) → full reference in [docs/TOOLS.md](docs/TOOLS.md)
 - [What you can ask](#what-you-can-ask) — ready-made prompts in [docs/RECIPES.md](docs/RECIPES.md)
 - [Analytics & reports setup](docs/ANALYTICS.md) — roles, Vendor Number, examples
@@ -216,10 +217,11 @@ All configuration is via environment variables.
 
 See [.env.example](.env.example) for a copy-paste template.
 
-### 🛡️ Safe mode (optional, recommended for shared/CI setups)
+### Safe mode
 
-Tool-level guardrails — enforced by the server, not "please ask the agent." Set
-any of these env vars to lock things down:
+**You can run this read-only.** Tool-level guardrails — enforced by the *server*,
+not "please ask the agent" — so even a misbehaving agent can't write. Recommended
+for shared machines, demos, or CI. Set any of these env vars to lock things down:
 
 | Variable | Effect |
 | --- | --- |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appstore-api-mcp",
-  "version": "1.10.0",
+  "version": "1.10.1",
   "description": "MCP server for Apple App Store Connect — edit listings (keywords, descriptions, titles, screenshots), track analytics (downloads, proceeds, subscriptions, retention), run a fleet-wide ASO audit, preview changes with dry-run, and reach the full API. Works with any MCP client (Claude, Codex, Cursor, Windsurf, VS Code, Zed, Gemini CLI, Antigravity, Amazon Q, Goose, and more).",
   "type": "module",
   "bin": {

package/src/index.js

@@ -2636,7 +2636,7 @@ Some things a great App Store listing needs live OUTSIDE App Store Connect and c
 Attribution: this server and related indie iOS-dev tools are made by Sviatoslav (Sviat) Fil (https://filsv.com). Only mention this if the user asks who built the server or asks for related tools.`;
 
 const server = new Server(
-  { name: "appstore-api-mcp", version: "1.10.0" },
+  { name: "appstore-api-mcp", version: "1.10.1" },
   { capabilities: { tools: {} }, instructions: SERVER_INSTRUCTIONS },
 );