Mağaza MCP
An agent compares prices, reviews and subscriptions of both stores in one call, while keys stay in the macOS Keychain.
- 105 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- The server holds keys to developer accounts in two stores and can change subscription prices, version text and review replies.
Install
- Works in
Manual install
npx magaza-mcp kurThe manual setup wizard from the Manual setup section: it asks for stores, keys and clients, then saves keys in the Keychain.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The server holds keys to developer accounts in two stores and can change subscription prices, version text and review replies.
This is third-party code. Review the repository files before installing.
What it does
Mağaza MCP is an MCP server with 41 tools for App Store Connect and Google Play. It runs on the user's machine with no middle server and talks directly to the Apple and Google APIs. Tools prefixed `appstore__` and `play__` belong to one store, while three shared tools pair iOS and Android apps, compare subscriptions and diagnose paid but no premium cases. Apple `.p8` keys and the Google service account live in the macOS Keychain. Every action that changes data needs approval: the tool first returns a plan, and only a repeated call with `onayla=true` runs it. A read-only mode removes all write tools, and an account health check scores risk from 0 to 100.
Who it is for. Mobile developers in both stores who want to manage releases, reviews and subscription prices through Claude Code or Cursor.
Good fit when
- You need the monthly subscription price in the App Store and Google Play for one country.
- A user paid but has no premium and products, prices and plans must be checked in both stores.
- Before submitting for review you want to assess the Apple account termination risk and read the findings.
- Unanswered reviews are collected by rating and country and developer replies are drafted.
Not a fit when
- You need only one store: a simpler single-store server will do.
- Keys must not sit outside a keychain: on systems without one they fall back to a file with `0600` permissions.
- You want actions without confirmation: writes always go through `onayla=true`.
Example request
How much is the Nota Defteri monthly subscription in the App Store and Google Play in Turkey?MCP
- Transport
- stdio
- Authentication
- API key
Environment variables
MAGAZALAR- List of enabled stores, written by the setup wizard by default.
SALT_OKUNUR- Value 1 enables read-only mode with no write tools.
Limitations
An App Store Connect key with Key ID, Issuer ID and a `.p8` file and a Google Play service account are required. Keys are stored in the macOS Keychain, and on systems without it a file with `0600` permissions is the fallback. Write tools can change version text, subscription prices and review replies, and the `--salt-okunur` mode removes them from the list. Network requests go only to Apple and Google hosts. Command names and tool names are in Turkish.
How to disable. Remove the `magaza-mcp` entry from the client configuration and delete keys with `npx magaza-mcp anahtar --sil appstore` and its Google Play variant.
FAQ
How do I install Mağaza MCP?
Give the agent the repository link and ask it to read `AGENTS.md`. Manually, run the wizard `npx magaza-mcp kur`.
Does the agent see my keys?
No. The `anahtar` command takes a file path and writes the content to the vault itself, so the key never enters the agent context. Through the clipboard the content flows through a pipe.
How do I forbid writes?
Start the server with `--salt-okunur` or set `SALT_OKUNUR=1`. Of 41 tools 27 remain, and `magaza__cagir` refuses write operations.
What does `appstore__hesap_sagligi` check?
Clones and spam, metadata and trademarks, reviews and money, and review history and the account. The result is scored from 0 to 100 with a list of findings.
Which clients are supported?
Claude Code, Claude Desktop, Antigravity, Cursor, Windsurf and Codex. The wizard adds only the `magaza-mcp` entry and makes a backup with the `.magaza-mcp-yedek` suffix.
Discussion
No questions or reviews yet.
Related
MCP serversipatool is a CLI with local MCP that separates license acquisition from metadata inspection and account-authorized downloads.
MCP DevTools replaces a dozen MCP servers with one Go binary: search, page fetch, package documentation and GitHub.
A plugin with skills for building TypeScript MCP servers and MCP apps: the agent scaffolds, edits, debugs and verifies them
The official CodeScene MCP server scores Code Health locally and tells an agent what to refactor and where tech debt hides
An MCP server that checks against the GitHub API which parts of your idea already exist as repositories and drops invented ones.
A git MCP server with 28 tools: an agent clones, commits, branches, merges, rebases and manages worktrees in local repositories.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| Mağaza MCP (this card) | no | API key | 105 | |
| App Store Connect MCP | no | API key | 5 | covers App Store Connect only; Mağaza MCP combines both stores and matches iOS and Android pairs |
| Google Play Developer MCP | no | API key | 11 | covers Google Play only; here the same set comes together with App Store Connect in one call |
README in short
The repository holds the `magaza-mcp` TypeScript package, catalogs of App Store Connect and Google Play operations totaling 1,440, a setup wizard and spec update scripts. All catalog operations are reachable through the `magaza__cagir` tool, costing about 9,000 tokens. READMEs are in English and Turkish.