AppFactory

An MCP server that lets your coding agent take a SwiftUI iOS subscription app from idea to the App Store.

What it does: idea harvesting and validation, design, SwiftUI code from a template, Supabase backend, App Store Connect + RevenueCat setup, localization, analytics, ASO, screenshots and TestFlight. Every stage has a gate the agent must pass. You do the final App Store submission.

Quickstart

Requires a Mac, Python 3.12+ and uv.

1. Add the MCP to your agent

One line, no installer. The server command is uvx appfactory.

2. Ask your agent: "Set up AppFactory"

The agent calls setup_status, asks which services you want, and turns them on. Keys never go through the chat: for secrets it opens a local page in your browser (127.0.0.1 only, one-time token) where you type them; they are stored in ~/.appfactory/config.toml (mode 0600). appfactory doctor shows what is configured.

Then try this first prompt. It needs no accounts:

Find 3 underserved iOS app niches in Health & Fitness and validate the best one

Works with

Claude Code, Codex CLI, Gemini CLI and Cursor. The run playbook is served by the MCP server itself (tool playbook(), prompt run, resource appfactory://playbook), so any MCP-capable agent can follow it.

Choose what you use

Every service is optional. Tools for a disabled service do nothing and the pipeline skips those stages (appfactory services enable|disable NAME).

Details and credential steps: docs/SETUP.md.

Safety

• Approvals. Irreversible or outward actions (submission, store/backend/RevenueCat writes, GitHub pushes, uploads) do not run when an agent calls them. They wait for appfactory approve <id> in your terminal.
• Dry run by default for deploys, repo creation, uploads and issue writes.
• Secrets stay local and are scrubbed from every tool result.
• Untrusted content (App Store listings, reviews) is labelled as data, not instructions.

Full threat model and limits: SECURITY.md.

How a run works

1. Interview. Before any work the agent calls run_options(), asks you about every optional part, and saves your answers. Anything you turn off is skipped.
2. Pipeline with gates. scaffold, design, features, backend, store setup, localize, analytics, ASO, metadata, screenshots, TestFlight. A stage is done only when pipeline_mark passes its gate; blockers stop the run with a NEEDS_HUMAN.md.
3. You submit. App Store submission is always human, in the App Store Connect web UI.

Docs

• docs/SETUP.md: credentials and per-app choices
• docs/PIPELINE_PLAYBOOK.md: the why, order and gotchas of every stage
• docs/TOOLS.md: every tool (generated)
• CONTRIBUTING.md, SECURITY.md, AGENTS.md

License

MIT