Skip to main content

Play Store MCP Server

CI codecov Security Rating Reliability Rating Maintainability Rating Vulnerabilities

PyPI version Docker Python 3.11+ Lines of Code License: MIT

An MCP (Model Context Protocol) server that connects to the Google Play Developer API. Deploy apps, manage releases, respond to reviews, and monitor app health — all through your AI assistant.

📖 Full Documentation

✨ Features

  • 🚀 App Deployment — Deploy APK/AAB files to any track (internal, alpha, beta, production)
  • ⚡ Batch Operations — Deploy to multiple tracks simultaneously
  • 🌐 Multi-Language Support — Deploy with release notes in multiple languages
  • ✅ Input Validation — Validate package names, tracks, and text before API calls
  • 🔄 Automatic Retries — Built-in retry logic with exponential backoff for transient failures
  • 📝 Store Listings — Update app titles, descriptions, and videos for any language
  • 📈 Release Management — Promote releases between tracks, manage staged rollouts
  • 👥 Tester Management — Add and manage testers for testing tracks
  • ⭐ Review Management — Fetch and reply to user reviews
  • 💳 Subscription Management — List subscriptions and check purchase status
  • 🛒 In-App Products — List and manage in-app products
  • 📦 Expansion Files — Manage APK expansion files for large apps
  • 🧾 Orders — Retrieve detailed transaction information
  • 🐳 Docker Support — Run as a container with health checks
  • 🔑 Per-Request Credentials — Bring-your-own-credentials for multi-tenant deployments
  • 🔒 Secure — Google Cloud service account authentication

🚀 Quick Start

Prerequisites

  1. Google Cloud Project with the Google Play Developer API enabled
  2. Service Account with access to your Play Console
  3. Python 3.11+, uvx, or Docker installed

Installation

# Run directly without installation
uvx play-store-mcp

Using pip

pip install play-store-mcp
play-store-mcp

Using Docker

docker run -e GOOGLE_APPLICATION_CREDENTIALS=/creds/key.json \
  -v /path/to/service-account.json:/creds/key.json:ro \
  ghcr.io/lusky3/play-store-mcp:latest

From source

git clone https://github.com/lusky3/play-store-mcp.git
cd play-store-mcp
pip install -e .
play-store-mcp

Configuration

Set the path to your service account key:

export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json

Running with HTTP Transport

For remote access or public deployments, run the server with streamable-http transport:

play-store-mcp --transport streamable-http --host 0.0.0.0 --port 8000

The server exposes a /health endpoint for monitoring.

For public deployments where users bring their own credentials, configure your MCP client to pass credentials in headers:

{
  "mcpServers": {
    "play-store": {
      "url": "https://your-server.com/mcp",
      "transport": "http",
      "headers": {
        "X-Google-Credentials-Base64": "YOUR_BASE64_ENCODED_CREDENTIALS"
      }
    }
  }
}

To get your base64-encoded credentials:

base64 -w 0 < service-account.json

Per-request credentials are isolated — each request uses only the credentials provided in its headers. No credentials are stored server-side or shared between requests.

Server-Side Credentials (For Private/Trusted Deployments)

For private deployments, set credentials via environment variable at server startup:

export GOOGLE_PLAY_STORE_CREDENTIALS='{"type":"service_account",...}'
# or
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json

play-store-mcp --transport streamable-http --host 0.0.0.0 --port 8000

Read-Only Mode

To point the server at a live Play Console without any risk of mutating it, run in read-only mode. All write tools (deploy, promote, halt, rollout, reply to reviews, listing/tester updates) return an error instead of calling the API; read tools are unaffected.

play-store-mcp --read-only
# or
export PLAY_STORE_MCP_READ_ONLY=1

Code Mode (Experimental)

Opt in to the experimental code-mode transform to serve the tools as three meta-tools (search/get_schema/execute) instead of the full tool list, cutting per-request tool-list token overhead. It is off by default. Install the sandbox extra and set the environment variable (CODE_MODE is env-only — there is no CLI flag):

pip install "play-store-mcp[code-mode]"
export CODE_MODE=1

Under code mode one execute call can invoke up to 50 tool calls (including mutations) behind a single approval. Read-only enforcement still applies inside the sandbox, so pair it with --read-only / PLAY_STORE_MCP_READ_ONLY=1 unless you need writes.

🔧 MCP Client Configuration

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "play-store": {
      "command": "uvx",
      "args": ["play-store-mcp"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      }
    }
  }
}

Kiro

Add to .kiro/settings/mcp.json:

{
  "mcpServers": {
    "play-store": {
      "command": "uvx",
      "args": ["play-store-mcp"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      }
    }
  }
}

Gemini CLI / Other MCP Clients

{
  "mcpServers": {
    "play-store": {
      "command": "uvx",
      "args": ["play-store-mcp"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      }
    }
  }
}

🛠️ Available Tools

Publishing Tools

Tool Description
deploy_app Deploy an APK/AAB to a track with optional staged rollout and single-language release notes
deploy_app_multilang Deploy an APK/AAB with multi-language release notes
promote_release Promote a release from one track to another
get_releases Get release status for all tracks
halt_release Halt a staged rollout
update_rollout Update rollout percentage for a staged release
get_app_details Get app metadata (title, description, etc.)

Store Listings Tools

Tool Description
get_listing Get store listing for a specific language
update_listing Update store listing (title, descriptions, video)
list_all_listings List all store listings for all languages

Review Tools

Tool Description
get_reviews Fetch recent reviews with optional filters
reply_to_review Reply to a user review

Subscription Tools

Tool Description
list_subscriptions List subscription products for an app
get_subscription_status Check subscription purchase status
list_voided_purchases List voided purchases

In-App Products Tools

Tool Description
list_in_app_products List all in-app products for an app
get_in_app_product Get details of a specific in-app product

Testers Management Tools

Tool Description
get_testers Get testers for a specific testing track
update_testers Update testers for a testing track

Orders Tools

Tool Description
get_order Get detailed order/transaction information

Expansion Files Tools

Tool Description
get_expansion_file Get APK expansion file information

Validation Tools

Tool Description
validate_package_name Validate package name format
validate_track Validate track name
validate_listing_text Validate store listing text lengths

Batch Operations Tools

Tool Description
batch_deploy Deploy to multiple tracks simultaneously

📋 Google Cloud Setup

1. Create a Service Account

  1. Go to Google Cloud Console
  2. Create a new project or select an existing one
  3. Enable the Google Play Developer API
  4. Go to IAM & Admin > Service Accounts
  5. Create a new service account
  6. Download the JSON key file

2. Grant Play Console Access

  1. Go to Google Play Console
  2. Navigate to Users and permissions
  3. Click Invite new users
  4. Enter the service account email (from the JSON file)
  5. Grant the following permissions:
    • Release apps to testing tracks (for internal/alpha/beta)
    • Release apps to production (for production releases)
    • Reply to reviews (for review management)
    • View app information and download bulk reports (for app details and orders)

🔒 Environment Variables

Variable Description Required
GOOGLE_APPLICATION_CREDENTIALS Path to service account JSON key Yes (or use per-request credentials)
GOOGLE_PLAY_STORE_CREDENTIALS Inline JSON credentials string Alternative to file path
PLAY_STORE_MCP_LOG_LEVEL Log level (DEBUG, INFO, WARNING, ERROR) No (default: INFO)
PLAY_STORE_MCP_DISABLE_DNS_REBINDING Disable DNS rebinding protection (for cloud/reverse-proxy deployments) No
PLAY_STORE_MCP_ADMIN_TOKEN Require Authorization: Bearer <token> on the /credentials endpoint (for deployments behind a reverse proxy) No
PLAY_STORE_MCP_READ_ONLY Disable all write operations (deploy, promote, rollout, reply, listing/tester updates) No (default: off)
PLAY_STORE_MCP_DOWNLOAD_DIR Directory that APK/AAB downloads are confined to (path-traversal / arbitrary-write protection). Downloads are always confined; defaults to the working directory when unset No (defaults to cwd); recommended for network/hosted deployments — the server warns if unset
CODE_MODE Enable the experimental code-mode transform (opt-in; requires the play-store-mcp[code-mode] extra) No (default: off)

🧪 Development

Setup

git clone https://github.com/lusky3/play-store-mcp.git
cd play-store-mcp
uv sync --dev

Running Tests

uv run pytest -v --cov=src/play_store_mcp

Linting

ruff check src/ tests/
ruff format src/ tests/

Type Checking

mypy src/

🐛 Troubleshooting

Error: "Service account key not found"

Ensure GOOGLE_APPLICATION_CREDENTIALS points to a valid JSON file:

ls -la $GOOGLE_APPLICATION_CREDENTIALS

Error: "The caller does not have permission"

Verify the service account has been granted access in Play Console with the required permissions.

Error: "Package name not found"

Ensure the app exists in Play Console and the service account has access to it.

📄 License

MIT License — see LICENSE for details.

🙏 Acknowledgments

🤖 AI Usage Disclaimer

Portions of this codebase were generated with the assistance of Large Language Models (LLMs). All AI-generated code has been reviewed and tested to ensure quality and correctness.

Metadata

Release files for play-store-mcp 0.6.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for play-store-mcp 0.6.1
File Size Uploaded Provenance
play_store_mcp-0.6.1.tar.gz 118.9 kB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for play-store-mcp 0.6.1
File Interpreter ABI Platform
play_store_mcp-0.6.1-py3-none-any.whl Python 3 none any Details

Total release size: 174.8 kB

Release files / play_store_mcp-0.6.1.tar.gz

Download URL play_store_mcp-0.6.1.tar.gz
Size 118.9 kB
Tags Source
SHA-256 checksum
How to use checksums
2239be9e8e10632b03fb8d0bcfe657c2c8541ca18e8207019c661c23e4930c36
BLAKE2b-256 checksum
How to use checksums
a5a13e6ba42e63a467463702cd94cd2ad8b0fd9853b5ffb9432d6a3bbbf4adcc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 4, 2026.

Transparency log

Release files / play_store_mcp-0.6.1-py3-none-any.whl

Download URL play_store_mcp-0.6.1-py3-none-any.whl
Size 55.9 kB
Tags Python 3
SHA-256 checksum
How to use checksums
e409ab0268e299139a297172212c74ce6ba7c4d8afe24ec649547d4bf81bd293
BLAKE2b-256 checksum
How to use checksums
db7cfd633ae7e6844d4e5e10bbe73873c38c271cf2c62f5357164e8bb2bd2fbb
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 4, 2026.

Transparency log

Security for play-store-mcp 0.6.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for play_store_mcp-0.6.1.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 4, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page