asc_list_iaps

What asc_list_iaps does on Appstoreconnect Mcp

AI agents call asc_list_iaps to retrieve information from Appstoreconnect Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why asc_list_iaps is rated Low

This tool retrieves and lists existing in-app purchase configurations. It performs a data retrieval operation with no side effects, no modifications, no code execution, and no financial transactions. The 'list' verb and read-only nature clearly indicate the Read category. Severity is low because exposure of this metadata carries minimal risk — it's configuration data already associated with published apps.

From the tool's definition Tool name is 'asc_list_iaps' and description states 'List in-app purchases for an app' — a read/query operation that retrieves data about consumables, non-consumables, and non-renewing subscriptions without modifying anything.

The rule that runs asc_list_iaps safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Appstoreconnect Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For asc_list_iaps, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "asc_list_iaps": {}
  }
}

Questions about asc_list_iaps