1. Conduid
  2. Developer Tools
  3. Play Store MCP
MCP server · Developer Tools

Play Store MCP

An MCP (Model Context Protocol) server that connects to the Google Play Developer API

Unclaimed MIT devtools
67Good

Scored 11 days ago · breakdown

About Play Store MCP

Play Store MCP is an MCP server published by lusky3 in the Developer Tools category: an MCP (Model Context Protocol) server that connects to the Google Play Developer API.

The repository has 26 stars and 14 forks, with the last commit 7 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/lusky3/play-store-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (7)

deploy_appDeploy an APK/AAB to a track with optional staged rollout and single-language release notes

Parameters not published.

deploy_app_multilangDeploy an APK/AAB with multi-language release notes

Parameters not published.

get_app_detailsGet app metadata (title, description, etc.)

Parameters not published.

get_releasesGet release status for all tracks

Parameters not published.

halt_releaseHalt a staged rollout

Parameters not published.

promote_releasePromote a release from one track to another

Parameters not published.

update_rolloutUpdate rollout percentage for a staged release

Parameters not published.

Ask AI

✦

Ask AI about Play Store MCP

Powered by Claude · Grounded in docs

I know everything about Play Store MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v0.6.1v0.6.1 · 4 Sep 2026What's Changed release: v0.6.1 - release.yml version/changelog verification gate by @lusky3 in https://github.com/lusky3/play-store-mcp/pull/139 Full Changelog: https://github.com/lusky3/play-store-mcp/compare/v0.6.0...v0.6.1
v0.6.0v0.6.0 · 4 Sep 2026What's Changed release: v0.6.0 - FastMCP 4 GA / MCP 2026-07-28 spec support by @lusky3 in https://github.com/lusky3/play-store-mcp/pull/137 Full Changelog: https://github.com/lusky3/play-store-mcp/compare/v0.5.1...v0.6.0
v0.5.1v0.5.1 · 19 Aug 2026What's Changed release: promote v0.5.0 to stable by @lusky3 in https://github.com/lusky3/play-store-mcp/pull/116 chore(deps): cap fastmcp to <4.0 pending MCP 2026-07-28 migration by @lusky3 in…
v0.5.0v0.5.0 · 14 Aug 2026What's Changed docs: update documentation for v0.3.0 by @lusky3 in https://github.com/lusky3/play-store-mcp/pull/53 ci: bump the uv group across 1 directory with 5 updates by @dependabot[bot] in…
v0.3.0v0.3.0 · 19 Jun 2026What's Changed fix: address 47 code review findings by @lusky3 in https://github.com/lusky3/play-store-mcp/pull/31 ci: bump actions/deploy-pages from 4.0.5 to 5.0.0 by @dependabot[bot] in https://github.com/lusky3/play-store-mcp/pull/33…

README

Play Store MCP Server

CI codecov Security Rating Reliability Rating Maintainability Rating Vulnerabilities

PyPI version Docker Lines of Code play-store-mcp MCP server

An MCP (Model Context Protocol) server that connects to the Google Play Developer API. Deploy apps, manage releases, respond to reviews, and monitor app health — all through your AI assistant.

📖 Full Documentation

✨ Features

  • 🚀 App Deployment — Deploy APK/AAB files to any track (internal, alpha, beta, production)
  • ⚡ Batch Operations — Deploy to multiple tracks simultaneously
  • 🌐 Multi-Language Support — Deploy with release notes in multiple languages
  • ✅ Input Validation — Validate package names, tracks, and text before API calls
  • 🔄 Automatic Retries — Built-in retry logic with exponential backoff for transient failures
  • 📝 Store Listings — Update app titles, descriptions, and videos for any language
  • 📈 Release Management — Promote releases between tracks, manage staged rollouts
  • 👥 Tester Management — Add and manage testers for testing tracks
  • ⭐ Review Management — Fetch and reply to user reviews
  • 💳 Subscription Management — List subscriptions and check purchase status
  • 🛒 In-App Products — List and manage in-app products
  • 📦 Expansion Files — Manage APK expansion files for large apps
  • 🧾 Orders — Retrieve detailed transaction information
  • 🐳 Docker Support — Run as a container with health checks
  • 🔑 Per-Request Credentials — Bring-your-own-credentials for multi-tenant deployments
  • 🔒 Secure — Google Cloud service account authentication

🚀 Quick Start

Prerequisites

  1. Google Cloud Project with the Google Play Developer API enabled
  2. Service Account with access to your Play Console
  3. Python 3.11+, uvx, or Docker installed

Installation

Using uvx (Recommended)

# Run directly without installation
uvx play-store-mcp

Using pip

pip install play-store-mcp
play-store-mcp

Using Docker

docker run -e GOOGLE_APPLICATION_CREDENTIALS=/creds/key.json \
  -v /path/to/service-account.json:/creds/key.json:ro \
  ghcr.io/lusky3/play-store-mcp:latest

From source

git clone https://github.com/lusky3/play-store-mcp.git
cd play-store-mcp
pip install -e .
play-store-mcp

Configuration

Set the path to your service account key:

export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json

Running with HTTP Transport

For remote access or public deployments, run the server with streamable-http transport:

play-store-mcp --transport streamable-http --host 0.0.0.0 --port 8000

The server exposes a /health endpoint for monitoring.

Per-Request Credentials (Recommended for Public Instances)

For public deployments where users bring their own credentials, configure your MCP client to pass credentials in headers:

{
  "mcpServers": {
    "play-store": {
      "url": "https://your-server.com/mcp",
      "transport": "http",
      "headers": {
        "X-Google-Credentials-Base64": "YOUR_BASE64_ENCODED_CREDENTIALS"
      }
    }
  }
}

To get your base64-encoded credentials:

base64 -w 0 < service-account.json

Per-request credentials are isolated — each request uses only the credentials provided in its headers. No credentials are stored server-side or shared between requests.

Server-Side Credentials (For Private/Trusted Deployments)

For private deployments, set credentials via environment variable at server startup:

export GOOGLE_PLAY_STORE_CREDENTIALS='{"type":"service_account",...}'
# or
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json

play-store-mcp --transport streamable-http --host 0.0.0.0 --port 8000

Read-Only Mode

To point the server at a live Play Console without any risk of mutating it, run in read-only mode. All write tools (deploy, promote, halt, rollout, reply to reviews, listing/tester updates) return an error instead of calling the API; read tools are unaffected.

play-store-mcp --read-only
# or
export PLAY_STORE_MCP_READ_ONLY=1

Code Mode (Experimental, enabled by default)

By default the tools are served as three meta-tools (search/get_schema/ execute) instead of the full tool list, cutting per-request tool-list token overhead. The sandbox execute runs in is a base dependency, so this works out of the box — no extra install needed.

To opt out and use the classic tool list instead (CODE_MODE is env-only — there is no CLI flag):

export CODE_MODE=0

Under code mode one execute call can invoke up to 50 tool calls (including mutations) behind a single approval. Read-only enforcement still applies inside the sandbox, so pair it with --read-only / PLAY_STORE_MCP_READ_ONLY=1 unless you need writes.

🔧 MCP Client Configuration

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "play-store": {
      "command": "uvx",
      "args": ["play-store-mcp"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      }
    }
  }
}

Kiro

Add to .kiro/settings/mcp.json:

{
  "mcpServers": {
    "play-store": {
      "command": "uvx",
      "args": ["play-store-mcp"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      }
    }
  }
}

Gemini CLI / Other MCP Clients

{
  "mcpServers": {
    "play-store": {
      "command": "uvx",
      "args": ["play-store-mcp"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      }
    }
  }
}

🛠️ Available Tools

Publishing Tools

Tool Description
deploy_app Deploy an APK/AAB to a track with optional staged rollout and single-language release notes
deploy_app_multilang Deploy an APK/AAB with multi-language release notes
promote_release Promote a release from one track to another
get_releases Get release status for all tracks
halt_release Halt a staged rollout
update_rollout Update rollout percentage for a staged release
get_app_details Get app metadata (title, description, etc.)

Store Listings Tools

Tool Description
get_listing Get store listing for a specific language
update_listing Update store listing (title, descriptions, video)
list_all_listings List all store listings for all languages

Review Tools

Tool Description
get_reviews Fetch recent reviews with optional filters
reply_to_review Reply to a user review

Subscription Tools

Tool Description
list_subscriptions List subscription products for an app
get_subscription_status Check subscription purchase status
list_voided_purchases List voided purchases

In-App Products Tools

Tool Description
list_in_app_products List all in-app products for an app
get_in_app_product Get details of a specific in-app product

Testers Management Tools

Tool Description
get_testers Get testers for a specific testing track
update_testers Update testers for a testing track

Orders Tools

Tool Description
get_order Get detailed order/transaction information

Expansion Files Tools

Tool Description
get_expansion_file Get APK expansion file information

Validation Tools

Tool Description
validate_package_name Validate package name format
validate_track Validate track name
validate_listing_text Validate store listing text lengths

Batch Operations Tools

Tool Description
batch_deploy Deploy to multiple tracks simultaneously

📋 Google Cloud Setup

1. Create a Service Account

  1. Go to Google Cloud Console
  2. Create a new project or select an existing one
  3. Enable the Google Play Developer API
  4. Go to IAM & Admin > Service Accounts
  5. Create a new service account
  6. Download the JSON key file

2. Grant Play Console Access

  1. Go to Google Play Console
  2. Navigate to Users and permissions
  3. Click Invite new users
  4. Enter the service account email (from the JSON file)
  5. Grant the following permissions:
    • Release apps to testing tracks (for internal/alpha/beta)
    • Release apps to production (for production releases)
    • Reply to reviews (for review management)
    • View app information and download bulk reports (for app details and orders)

🔒 Environment Variables

Variable Description Required
GOOGLE_APPLICATION_CREDENTIALS Path to service account JSON key Yes (or use per-request credentials)
GOOGLE_PLAY_STORE_CREDENTIALS Inline JSON credentials string Alternative to file path
PLAY_STORE_MCP_LOG_LEVEL Log level (DEBUG, INFO, WARNING, ERROR) No (default: INFO)
PLAY_STORE_MCP_DISABLE_DNS_REBINDING Disable DNS rebinding protection (for cloud/reverse-proxy deployments) No
PLAY_STORE_MCP_ADMIN_TOKEN Require Authorization: Bearer <token> on the /credentials endpoint (for deployments behind a reverse proxy) No
PLAY_STORE_MCP_READ_ONLY Disable all write operations (deploy, promote, rollout, reply, listing/tester updates) No (default: off)
PLAY_STORE_MCP_DOWNLOAD_DIR Directory that APK/AAB downloads are confined to (path-traversal / arbitrary-write protection). Downloads are always confined; defaults to the working directory when unset No (defaults to cwd); recommended for network/hosted deployments — the server warns if unset
CODE_MODE Set to 0 to opt out of the code-mode transform and use the classic tool list No (default: on)

🧪 Development

Setup

git clone https://github.com/lusky3/play-store-mcp.git
cd play-store-mcp
uv sync --dev

Running Tests

uv run pytest -v --cov=src/play_store_mcp

Linting

ruff check src/ tests/
ruff format src/ tests/

Type Checking

mypy src/

🐛 Troubleshooting

Error: "Service account key not found"

Ensure GOOGLE_APPLICATION_CREDENTIALS points to a valid JSON file:

ls -la $GOOGLE_APPLICATION_CREDENTIALS

Error: "The caller does not have permission"

Verify the service account has been granted access in Play Console with the required permissions.

Error: "Package name not found"

Ensure the app exists in Play Console and the service account has access to it.

📄 License

MIT License — see LICENSE for details.

🙏 Acknowledgments

🤖 AI Usage Disclaimer

Portions of this codebase were generated with the assistance of Large Language Models (LLMs). All AI-generated code has been reviewed and tested to ensure quality and correctness.

README fetched from the repository 4 days ago. The original is authoritative.

Questions

About Play Store MCP

How do I install Play Store MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Play Store MCP safe to use with an AI agent?

Its trust score is 67 out of 100 (good). It passes 5 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Play Store MCP still maintained?

Yes — the latest release is v0.6.1 (4 Sep 2026), and the last commit was 7 days ago. The repository has 26 stars and 6 open issues.