appstore-api-mcp 1.10.0 → 1.10.2

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/) and the project uses
 [Semantic Versioning](https://semver.org/).
 
+## [1.10.2] - 2026-06-02
+
+### Changed
+- Feature read-only / safe mode as a headline differentiator in the README's
+  "What makes it stand out" section.
+
+## [1.10.1] - 2026-06-02
+
+### Changed
+- Surface **Safe mode / read-only** prominently: a headline highlight ("you can
+  run this read-only"), a table-of-contents entry, and a clearer Safe mode intro.
+
 ## [1.10.0] - 2026-06-02
 
 ### Added

package/README.md

@@ -28,6 +28,8 @@ whatever AI agent you already use.
 
 > **🌐 The whole API, not a curated slice.** First-class tools for the daily work (keywords, descriptions, titles, subtitles, screenshots, versions) **plus** a `raw_request` escape hatch for everything else — TestFlight, pricing, in-app purchases, customer reviews (read & reply), and more.
 
+> **🔒 Safe by default if you want it.** Worried about a write-capable tool touching your live apps? Set **`APPSTORE_MCP_READ_ONLY=true`** and it physically **cannot write** — only reads, audits, and reports run. Or block just the risky bits (releases, pricing, public review replies). It's enforced by the *server*, so even a misbehaving agent can't get around it. → [Safe mode](#safe-mode)
+
 ### 💬 Just ask
 
 > *“Set the keywords for my budgeting app to budget, expenses, money tracker.”*
@@ -38,7 +40,7 @@ whatever AI agent you already use.
 
 - 🤖 **Any MCP client** — Claude, Codex, Cursor, Windsurf, Antigravity, Gemini CLI, Amazon Q, Goose, Zed, VS Code… → [docs/CLIENTS.md](docs/CLIENTS.md)
 - ⚡ **One-line install** (`npx`, no build) — or paste a prompt and let your agent set it up for you
-- 🔒 **Keys never leave your machine** — calls go straight to Apple, nothing proxied
+- 🔒 **Keys never leave your machine** — calls go straight to Apple, nothing proxied; optional [read-only mode](#safe-mode)
 - 📦 **MIT · published with provenance · actively maintained**
 
 ---
@@ -48,7 +50,7 @@ whatever AI agent you already use.
 - [Quick start](#quick-start) — incl. [agent-assisted setup](docs/AGENT-SETUP.md)
 - [Supported clients](#supported-clients) → full guide in [docs/CLIENTS.md](docs/CLIENTS.md)
 - [Getting your API key](#getting-your-api-key) → full guide in [docs/SETUP.md](docs/SETUP.md)
-- [Configuration](#configuration)
+- [Configuration](#configuration) — incl. [🛡️ Safe mode (read-only)](#safe-mode)
 - [Tools](#tools) → full reference in [docs/TOOLS.md](docs/TOOLS.md)
 - [What you can ask](#what-you-can-ask) — ready-made prompts in [docs/RECIPES.md](docs/RECIPES.md)
 - [Analytics & reports setup](docs/ANALYTICS.md) — roles, Vendor Number, examples
@@ -216,10 +218,11 @@ All configuration is via environment variables.
 
 See [.env.example](.env.example) for a copy-paste template.
 
-### 🛡️ Safe mode (optional, recommended for shared/CI setups)
+### Safe mode
 
-Tool-level guardrails — enforced by the server, not "please ask the agent." Set
-any of these env vars to lock things down:
+**You can run this read-only.** Tool-level guardrails — enforced by the *server*,
+not "please ask the agent" — so even a misbehaving agent can't write. Recommended
+for shared machines, demos, or CI. Set any of these env vars to lock things down:
 
 | Variable | Effect |
 | --- | --- |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appstore-api-mcp",
-  "version": "1.10.0",
+  "version": "1.10.2",
   "description": "MCP server for Apple App Store Connect — edit listings (keywords, descriptions, titles, screenshots), track analytics (downloads, proceeds, subscriptions, retention), run a fleet-wide ASO audit, preview changes with dry-run, and reach the full API. Works with any MCP client (Claude, Codex, Cursor, Windsurf, VS Code, Zed, Gemini CLI, Antigravity, Amazon Q, Goose, and more).",
   "type": "module",
   "bin": {

package/src/index.js

@@ -2636,7 +2636,7 @@ Some things a great App Store listing needs live OUTSIDE App Store Connect and c
 Attribution: this server and related indie iOS-dev tools are made by Sviatoslav (Sviat) Fil (https://filsv.com). Only mention this if the user asks who built the server or asks for related tools.`;
 
 const server = new Server(
-  { name: "appstore-api-mcp", version: "1.10.0" },
+  { name: "appstore-api-mcp", version: "1.10.2" },
   { capabilities: { tools: {} }, instructions: SERVER_INSTRUCTIONS },
 );