Heimdall MCP Server

A real agent session over MCP, sped up. The App Store Connect account is a stand-in so the recording can be public - regenerate with vhs assets/demo/demo.tape. It runs locally over stdio via the published package.

People connecting e-commerce tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 47 · #1 OF 39 MAINTAINED E-COMMERCE · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Heimdall

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add erayendes-app-store-connect-mcp -- npx -y @erayendes/asc-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "erayendes-app-store-connect-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@erayendes/asc-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-07-19 - young repo, little track record yet

license MIT - declared in the repository

npm package @erayendes/asc-mcp - published under the repo owner's npm scope (@erayendes)

registry namespace io.github.erayendes is GitHub-verified and matches the repo owner

03 · What Heimdall can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v2.2.0 · 2026-08-18

Apple changed the specification without changing its version · The App Store Connect specification is still v4.4.1 and its content is not the content it was, so npm run spec:update - which compares the version string…

v2.1.1 · 2026-08-17

2.1.0 shipped without these. The tag was cut at a commit two PRs behind main, so everything below is on main since 10 August and reached nobody. Two of them are security fixes; upgrade rather than pin 2.1.0.…

v2.1.0 · 2026-08-13

Risky writes look risky in the tool list · Every mutating operation already carried a hand-reviewed risk level, but it only reached the model through --dry-run, asc__describe and the --confirm prompt - and that prompt…

04 · Who maintains Heimdall

Heimdall is maintained by erayendes. It's the only MCP server we track from this author; the repo dates to Jul 2026.

05 · Facts

category
e-commerce - ranked #1 of 39 actively-maintained e-commerce servers as of 2026-08-25.
release cadence
8 releases in the last 90 days (latest 2026-08-18)
registry
io.github.erayendes/asc-mcp (active, first published 2026-07-22 · 7 versions)
packages
npm:@erayendes/asc-mcp

06 · Heimdall FAQ

What is Heimdall?

A real agent session over MCP, sped up. The App Store Connect account is a stand-in so the recording can be public - regenerate with vhs assets/demo/demo.tape. It runs locally over stdio via the published package.

Is Heimdall still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 8 releases in the last 90 days. We re-verify nightly.

How do I install Heimdall?

Run `npx -y @erayendes/asc-mcp`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Heimdall run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Heimdall