Borrowing it
Nothing to install: this file belongs to zelentsov-dev/asc-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zelentsov-dev/asc-mcp/main/AGENTS.mdgit clone --depth 1 https://github.com/zelentsov-dev/asc-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/zelentsov-dev/asc-mcp/agents-md)<a href="https://agentmods.dev/instructions/zelentsov-dev/asc-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/zelentsov-dev/asc-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/zelentsov-dev/asc-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/zelentsov-dev/asc-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02751 | $0.02751 |
| Opus 5.5 | $0.01100 | $0.01100 |
| Sonnet 5.5 | $0.00550 | $0.00550 |
| Haiku 4.5 | $0.00275 | $0.00275 |
Grade A, and why
asc-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- asc-mcp CLAUDE.md — 92% identical, 225 lines differ
How it starts
The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
This file is the canon for every coding agent (Codex, Claude Code) working in this repository. CLAUDE.md imports it and adds only Claude Code specifics.
Language
Response language: Russian Comment language: English
Project Overview
MCP (Model Context Protocol) server for App Store Connect API integration, designed for MCP clients such as Claude Code and Codex CLI. This server provides tools to manage iOS/macOS apps through App Store Connect.
Build and Run Commands
# Build the project
swift build
# Run all unit tests
swift test
# Run the MCP server (requires environment variables or companies.json)
./.build/debug/asc-mcp
# Run with worker filtering (for clients with tool limits)
./.build/debug/asc-mcp --workers apps,builds,versions,reviews
# Run integration tests
./.build/debug/asc-mcp --test
# Clean build
swift package clean
Environment Configuration
Three config methods (checked in priority order):
--companies /path/to/companies.json(CLI argument)ASC_MCP_COMPANIESenv var → path to JSON file- Default JSON:
~/.config/asc-mcp/companies.json ASC_COMPANY_1_KEY_ID,ASC_COMPANY_2_KEY_ID... (multi-company env vars)ASC_KEY_ID+ASC_ISSUER_ID+ASC_PRIVATE_KEY_PATH(single company env vars)
Each company needs: keyID, issuerID, privateKeyPath (path to .p8 file).
Architecture
Core Components
WorkerManager (Workers/MainWorker/WorkerManager.swift) — central registry, routes tool calls by prefix.
Workers (40 Swift worker classes; 36 --workers filter keys; 514 tools):
| Worker | Prefix | Tools | Domain |
|---|---|---|---|
| CompaniesWorker | company_ |
3 | Multi-account management |
| AuthWorker | auth_ |
4 | JWT tokens |
| AppsWorker | apps_ |
10 | App listing, metadata, localizations, search keyword IDs |
| AccessibilityWorker | accessibility_ |
6 | App Store accessibility declarations |
| WebhooksWorker | webhooks_ |
11 | Webhook notifications, delivery diagnostics, receiver helpers |
| XcodeCloudWorker | xcode_cloud_ |
42 | Xcode Cloud products, workflow management, builds, artifacts, issues, test results, SCM |
| BuildsWorker | builds_ |
4 | Build management |
| BuildUploadsWorker | build_uploads_ |
10 | Build upload parents, files, safe transfers, and recovery |
| BuildBetaDetailsWorker | builds_*_beta_ |
11 | TestFlight localizations, notifications, beta groups, individual testers |
| BuildProcessingWorker | builds_*_processing_ |
4 | Build states, encryption |
| ExportComplianceWorker | export_compliance_ |
11 | Encryption declarations, document delivery, build linkage, readiness |
| AppLifecycleWorker | app_versions_ |
17 | Versions, age ratings, submit, release, phased rollout, delete |
| ReviewsWorker | reviews_ |
8 | Customer reviews, responses, AI summarizations |
| BetaGroupsWorker | beta_groups_ |
15 | TestFlight groups CRUD, testers, builds, recruitment criteria |
| BetaFeedbackWorker | beta_feedback_ |
8 | TestFlight feedback screenshots, crash submissions, crash logs |
| InAppPurchasesWorker | iap_ |
59 | IAP, versioned metadata, pricing, availability, offer codes, review assets |
| ProvisioningWorker | provisioning_ |
17 | Bundle IDs, devices, certificates, profiles, capabilities |
| BetaTestersWorker | beta_testers_ |
12 | Tester management, search, invite, relationships, invitations |
| AppInfoWorker | app_info_ |
10 | App info, categories, localizations, EULA |
| PricingWorker | pricing_ |
9 | Territories, availability, price points/schedule, app availabilities v2 |
| UsersWorker | users_ |
10 | Team members, roles, invitations, visible apps |
| AppEventsWorker | app_events_ |
9 | In-app events CRUD, localizations |
| AnalyticsWorker | analytics_ |
11 | Sales/financial reports, app summary, analytics reports/instances/segments, snapshot status |
| SubscriptionsWorker | subscriptions_ |
99 | Subscription and group versions, pricing, plan availability, offers, assets; includes offer-code, intro, promotional, and win-back sub-worker behavior |
| SandboxTestersWorker | sandbox_ |
3 | Sandbox testers (list, update, clear purchase history) |
| BetaAppWorker | beta_app_ |
10 | Beta app localizations, review submissions, review details |
| PreReleaseVersionsWorker | pre_release_ |
3 | Pre-release versions (list, get, builds) |
| BetaLicenseAgreementsWorker | beta_license_ |
3 | Beta license agreements (list, get, update) |
| AssetsWorker | assets_ |
11 | Reusable assets, typed preview/apply, placements, review, and private recovery journal |
| ScreenshotsWorker | screenshots_ |
19 | Screenshots, previews, sets, verified reorder, full upload, batch upload |
| CustomProductPagesWorker | custom_pages_ |
17 | Custom product pages, versions, localizations, search keywords |
| ProductPageOptimizationWorker | ppo_ |
15 | A/B test experiments, treatments, localizations |
| PromotedPurchasesWorker | promoted_ |
10 | Promoted in-app purchases and verified reorder; legacy image tools return migration guidance |
| ReviewAttachmentsWorker | review_attachments_ |
4 | App Store review attachments (upload, get, delete, list) |
| ReviewSubmissionsWorker | review_submissions_ |
9 | Generic App Store review submissions and submission items |
| MetricsWorker | metrics_ |
10 | Performance/power metrics, diagnostics, TestFlight usage metrics |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 19d ago Changed · +2 lines · +84 tokens per session 39f5b57b775f
- 2mo ago First seen · 213 lines · 2,667 tokens per session scan A 5c41b9b38bf5
asc-mcp AGENTS.md is an instructions file published in the GitHub repository zelentsov-dev/asc-mcp (84 stars, last pushed yesterday), licensed MIT. It adds 2,751 tokens to every session, about $0.0110 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
asc-mcp AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| asc-mcp AGENTS.mdzelentsov-dev/asc-mcp | Instructions file | 84 | yesterday | MIT | A | 2,751 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,516 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,093 | GitHub Copilot |
| vscode model-prompts.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 2,022 | GitHub Copilot |