play-console-mcp

An MCP server for the Google Play Console: store listings, icon, feature graphic, screenshots, app bundle releases, and user reviews. It runs over stdio and works with Claude Code or any other MCP client.

It is built to be safe to hand to an AI agent:

• Changes are staged, never published implicitly. Write tools put their changes in a Play edit and return its editId. Nothing goes live until commit_edit is called, so the agent can show you edit_summary first and wait for your approval.

• A staged edit is never discarded by accident. Google Play keeps one open edit per app, and opening another deletes it. While an edit the server staged is open, a read or write without edit_id is refused with that edit's id instead. commit_edit checks production tracks against a snapshot taken when the edit was created, so it never opens a second edit.

• Production is locked. Staging or committing a change to the production track, or to a form-factor production track such as wear:production, is refused unless the server runs with PLAY_ALLOW_PRODUCTION=1.

• Package allowlist. The server only touches the packages in PLAY_PACKAGE_NAMES.

• Files stay inside the asset root. Graphics, bundles and listing files must resolve to files under PLAY_ASSET_ROOT (symlinks are followed before the check), so a prompt cannot make it read or upload an arbitrary file from your machine. The server refuses an asset root that is your home directory or above it. Images are checked against Play's size rules before anything is sent.

• Reviews are marked untrusted. Review results carry a note telling the agent that review text is user content, not instructions. reply_to_review publishes immediately, so keep it behind a permission prompt.

Requirements

• uv (installs Python 3.11+ and the dependencies on first run)

• A Google Cloud service account with access to your app in Play Console

Related MCP server: play-console-mcp

Service account setup

1. In Google Cloud Console, pick or create a project, open APIs & Services → Library, and enable the Google Play Android Developer API.

2. Under IAM & Admin → Service Accounts, create a service account (no Cloud roles needed). In its Keys tab, choose Add key → JSON and download the key.

3. Store the key outside any repository:

   mkdir -p ~/.config/play-console-mcp && mv ~/Downloads/<key>.json ~/.config/play-console-mcp/service-account.json && chmod 600 ~/.config/play-console-mcp/service-account.json

4. In Play Console → Users and permissions → Invite new users, add the service account's email. Under App permissions, add only your app and grant what you need:

   • View app information (read-only)

   • Manage store presence (listings and graphics)

   • Reply to reviews

   • Release apps to testing tracks

   • Leave out Release to production unless you really want the agent near production.

New permissions can take a few hours to apply; until then the API answers 403 The caller does not have permission.

The Play Developer API cannot create apps. Create the app and upload its first bundle in Play Console by hand.

Configuration

Adding it to Claude Code

From your app's repository, so the asset root is that repository:

claude mcp add play-console --scope local -e PLAY_PACKAGE_NAMES=com.example.app -- uv run --quiet --project /path/to/play-console-mcp play-console-mcp

uv run --project installs the exact dependency versions in uv.lock, so this is the most reproducible setup.

Or in the app repository's .mcp.json, pinned to a release tag:

{
  "mcpServers": {
    "play-console": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/denshinji/play-console-mcp@v0.1.1", "play-console-mcp"],
      "env": { "PLAY_PACKAGE_NAMES": "com.example.app" }
    }
  }
}

Keep the @v0.1.1 tag (or a commit hash). Without it, every start runs whatever is on main. uvx does not read uv.lock, so it resolves dependencies within the ranges in pyproject.toml; the upper bounds there stop a major release of a dependency from slipping in.

Leave commit_edit, reply_to_review, delete_edit and stage_store_dir out of your permission allowlist so each call asks you first.

What the guards do not cover

The checks above live inside this server. They stop an agent that talks to Play through these tools, and nothing else:

• The key decides what is possible. Anything that can read the key file, including an agent with shell access on your machine, can call the Play API directly and skip every check here. The real limit is the permission set you grant the service account in Play Console, so leave out Release to production and admin rights, and use a separate service account from the one your CI uploads with.

• Permission prompts depend on your client. In Claude Code's auto or bypass permission modes, a tool call may run without asking you. If you use those modes, add ask rules for commit_edit, reply_to_review and delete_edit (for example mcp__play-console__commit_edit) so publishing still needs your confirmation.

• Data goes to your model provider. Review text, reviewer names and app contact details returned by the tools are sent to whichever model your client uses.

Syncing a store folder

stage_store_dir reads a folder (default docs/store/play) laid out like this:

docs/store/play/
  listing-id.md                  one file per language: listing-<language>.md
  listing-en-US.md
  icon-512.png                   icon*.png             → icon
  feature-graphic-1024x500.png   feature-graphic*.png  → featureGraphic
  screenshots/01-home.png        screenshots/*         → phoneScreenshots, in file-name order

Each listing file has one ## section per field. Headings may be English or Indonesian, and a character count in parentheses is ignored:

## App name (6/30)
Example

## Short description
One line that sells the app.

## Full description
Everything else.

It runs as a dry run by default and only reports what it would change. With dry_run=false it patches every listing and replaces each graphic set in one edit, ready for commit_edit. A typical request:

Sync docs/store/play to Play Console, show me the edit summary, and wait for my go-ahead before committing.

Tools

Development

uv run pytest -q

Tests use a mocked Play API and need no credentials.

License

MIT