Spill MCP server
io.github.vicc/spill·v0.1.5Pull TestFlight screenshot feedback from App Store Connect into AI coding agents.
30 downloads/wk
Reviews
Write oneNobody has reviewed Spill yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Spill tools (5)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
generate_testflight_reportFetches feedback and returns a Markdown report as text.
get_testflight_feedback_detailGets a specific TestFlight screenshot feedback item.
list_appsLists App Store Connect apps visible to the configured API key.
list_testflight_feedbackLists TestFlight screenshot feedback for an app.
spill_testflight_feedbackPulls TestFlight screenshot feedback and writes local files.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
How Spill compares
Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 55/100
- higher than 10% of 2,174 E-commerce servers
- Tools
- 5
- the typical E-commerce server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 30
- more than 21% of 411 E-commerce servers with a package
What its tools let an agent do: 4 read · 1 create
Install Spill in Claude Code, Cursor or VS Code
Runs npx -y @viccalexander/spill on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add spill -- npx -y @viccalexander/spill
Spill: common questions
- Is Spill MCP server safe?
- With care: it is graded C, so read the findings first (55/100). Read the Spill safety report
- How do I install Spill?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Spill need an API key?
- Yes. The registry entry asks for
ASC_PRIVATE_KEY_PATH. - Is Spill maintained?
- The latest release is v0.1.5.
- What can I use instead of Spill?
- Servers from other publishers that do the same job: Mneme Memory MCP server, Appstoreconnect MCP server and Storeshots MCP server.
- How does Spill compare with other E-commerce MCP servers?
- safety score 55/100 (higher than 10% of 2,174 E-commerce servers); tools 5 (the typical E-commerce server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Spill
Same job from other publishers: the closest match first, then the best rated.
- Mneme MemoryCross-session memory for AI coding agents via six tools; local-first SQLite store.not reviewedEstablishedA
- AppstoreconnectApp Store Connect for MCP clients: PPP pricing, subscriptions, TestFlight, reviews, reports & morenot reviewedGrowingA
- StoreshotsRender store-ready App Store and Google Play screenshots: device frames, headlines, exact sizes.not reviewedGrowingA
- Appstore ConnectMCP server for Apple's App Store Connect API. Manage apps, TestFlight, and more.not reviewedGrowingA
- Loki ModeAutonomous spec-to-product coding-agent CLI with an MCP server exposing 39 tools over stdio.not reviewedEstablishedB