Heimdall

by erayendes·io.github.erayendes/asc-mcp·v2.4.0

Every App Store Connect + StoreKit 2 endpoint. 890 tools in 13 profiles, narrow to 27.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

Established

47 stars152 downloads/wk

Reviews

Nobody has reviewed Heimdall yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tool lists for local packages are only visible after install.

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan81 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @erayendes/asc-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add asc-mcp -- npx -y @erayendes/asc-mcp

Same job from other publishers, ranked by rating then adoption.

apify-mcp-server
Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
not reviewed
Established
A
LemonSqueezy MCP Server
LemonSqueezy MCP server for managing your store from AI assistants
not reviewed
Growing
B
Store Builder
Design, fill with real store data, render and publish Store Builder pages from an AI agent.
not reviewed
Growing
B
DebugBundle
DebugBundle MCP: runtime error reporting, incident response, health checks, and product analytics.
not reviewed
Growing
B
Kapruka MCP
Free public MCP server for Kapruka.com — Sri Lanka's largest e-commerce platform.
not reviewed
Growing
B

Local package. It runs on your machine, not through the gateway.

ASC_KEY_IDApp Store Connect API Key ID. Normally written for you by `npx -y @erayendes/asc-mcp setup`.
ASC_ISSUER_IDApp Store Connect Issuer ID (a UUID). Normally written for you by `setup`.
ASC_PRIVATE_KEYsecretThe .p8 private key as PEM text. Prefer `setup`, which stores it in the macOS Keychain instead of any config file; set this only where a Keychain is unavailable, such as CI.
ASC_PRIVATE_KEY_PATHPath to the .p8 file, as an alternative to pasting its contents. Off macOS this is what `setup` records.
ASC_BUNDLE_IDBundle ID of one app. Only needed by the StoreKit 2 transaction tools on the monetization profile.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.