Skip to main content
Glama
Sign In
app-store-connect-mcp

app-store-connect-mcp

by devinwang
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

certificates_create_instance

Creates a new Apple signing certificate in App Store Connect by sending a JSON request to the certificates endpoint. Use it to provision iOS, macOS, or tvOS signing identities for builds.

Instructions

POST /v1/certificates (POST /v1/certificates) Body shape: see OpenAPI components.schemas.CertificateCreateRequest for the full JSON:API envelope.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "body": "<body>"
    },
    "name": "certificates_create_instance"
  }
}

Input Schema

NameRequiredDescriptionDefault
bodyYesJSON body. Shape: components.schemas.CertificateCreateRequest.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.5.0

TDQS

C2.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden and it does not meet it. It does not disclose that certificate creation typically requires elevated API credentials, what kind of certificate is produced, or any side effects or limits — only that a POST occurs and where to find the body schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is very short and front-loads the endpoint, but the parenthetical '(POST /v1/certificates)' simply repeats the text immediately before it and earns nothing. The single useful sentence is the pointer to the request schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with a nested request body, no annotations, and no output schema, the description is far too thin. It omits certificate type semantics (development vs distribution), required credential context, and any indication of what the call returns, leaving the agent dependent on an external OpenAPI document it may not have.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and there is a single body parameter, so the baseline is 3. The description's pointer to components.schemas.CertificateCreateRequest largely duplicates what the schema description already says, adding no new syntax or field-level meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the HTTP verb and resource (POST /v1/certificates), which implies certificate creation, but never states the purpose in words (e.g. 'create a signing certificate'). It gives the agent no way to distinguish this from certificates_get_collection, certificates_update_instance, or certificates_delete_instance beyond the URL string.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance, no prerequisites, and no mention of alternatives. The agent must infer that this is the creation counterpart to the other certificate tools purely from the endpoint path.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools