
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@getappniche/mcp
Advanced tools
GetAppNiche MCP — live App Store & Google Play data for AI agents: app discovery, ASO keyword scoring, reviews. Zero-dependency stdio bridge to the hosted Streamable HTTP endpoint.
The Model Context Protocol surface of GetAppNiche: live App Store & Google Play data — app discovery with revenue & download data, ASO keyword scoring, historical metrics and review feeds — for Claude, Cursor, Codex, Gemini CLI and any other MCP-capable agent.
You probably don't need to run anything. The server is hosted:
https://api.getappniche.com/mcp Streamable HTTP · JSON-RPC 2.0
Authorization: Bearer YOUR_API_KEY app.getappniche.com → Settings → API Keys
Claude Code — one command, no restart:
claude mcp add --transport http getappniche https://api.getappniche.com/mcp \
--header "Authorization: Bearer YOUR_API_KEY"
Cursor — .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):
{
"mcpServers": {
"getappniche": {
"url": "https://api.getappniche.com/mcp",
"headers": { "Authorization": "Bearer YOUR_API_KEY" }
}
}
}
Claude Desktop — claude_desktop_config.json, then restart the app fully:
{
"mcpServers": {
"getappniche": {
"command": "npx",
"args": ["-y", "@getappniche/mcp"],
"env": { "GETAPPNICHE_API_KEY": "YOUR_API_KEY" }
}
}
}
VS Code (Copilot agent mode) — .vscode/mcp.json:
{
"servers": {
"getappniche": {
"type": "http",
"url": "https://api.getappniche.com/mcp",
"headers": { "Authorization": "Bearer YOUR_API_KEY" }
}
}
}
Windsurf — ~/.codeium/windsurf/mcp_config.json (the field is serverUrl):
{
"mcpServers": {
"getappniche": {
"serverUrl": "https://api.getappniche.com/mcp",
"headers": { "Authorization": "Bearer YOUR_API_KEY" }
}
}
}
Codex CLI — ~/.codex/config.toml, then export GETAPPNICHE_API_KEY:
[mcp_servers.getappniche]
url = "https://api.getappniche.com/mcp"
bearer_token_env_var = "GETAPPNICHE_API_KEY"
Gemini CLI — ~/.gemini/settings.json (the field is httpUrl):
{
"mcpServers": {
"getappniche": {
"httpUrl": "https://api.getappniche.com/mcp",
"headers": { "Authorization": "Bearer YOUR_API_KEY" }
}
}
}
Zed, Cline, Continue and JetBrains AI are covered too —
getappniche.com/mcp has every snippet.
Companion agent skills:
getappniche/aso-skills
(npx skills add getappniche/aso-skills).
ChatGPT — Settings → Connectors → create a custom connector (Developer
mode), point it at https://api.getappniche.com/mcp and pick API key
authentication, then paste your key.
claude.ai on the web documents request-header auth, but its connector UI currently exposes only OAuth fields — until that settles, use one of the clients above.
A zero-dependency stdio bridge for clients that speak MCP over stdio and
can't send HTTP headers — in two flavours: bin/cli.mjs (Node 18+, published as
@getappniche/mcp) and
server.py (Python 3.9+, stdlib only). Both forward every JSON-RPC message to
the hosted endpoint over TLS and stream responses back.
# Node — one-liner, no install
GETAPPNICHE_API_KEY="getappniche_..." npx -y @getappniche/mcp
# Python — no dependencies
GETAPPNICHE_API_KEY="getappniche_..." python3 server.py
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"getappniche": {
"command": "npx",
"args": ["-y", "@getappniche/mcp"],
"env": { "GETAPPNICHE_API_KEY": "getappniche_..." }
}
}
}
server.json is the manifest published to the
official MCP registry as
com.getappniche/mcp.
Being ~150 readable lines, it doubles as a reference for what travels over the
wire: your API key goes only into the Authorization header of TLS requests
to api.getappniche.com — nothing else, nowhere else.
search_apps - Search apps across 25+ filters: store, categories, languages, price model, rating, reviews, downloads, revenue, release and update recency, review growth - sorted by any column (1 credit)get_app_detail - Get one app by canonical id, bare Apple id, Android package name, or a pasted store URL (1 credit)get_app_historicals - Metric time series: reviews, ratings, downloads, revenue (1 credit)get_keyword_difficulty - Popularity, difficulty, traffic and opportunity for a keyword (10 credits)batch_keyword_difficulty - Score up to 10 keywords, sorted by opportunity (10 credits per keyword)get_app_reviews - Live App Store or Google Play reviews for any app by id, package name or URL, or enriched rows for apps monitored in your workspace (1 credit)get_supported_countries - List valid store country codes (free)Credits ship with a GetAppNiche plan (Pro: 5,000/month) and every result reports
credits_charged. Rate limit: 60 requests/minute per key.
initialize → notifications/initialized → tools/list /
tools/call. Protocol errors use standard JSON-RPC codes; tool-level errors
(bad id, out of credits) come back as tool results your agent can read.Mcp-Session-Id and accepts both JSON and SSE-framed
responses.MIT. Built by GetAppNiche · X @getappniche · LinkedIn
FAQs
GetAppNiche MCP — live App Store & Google Play data for AI agents: app discovery, ASO keyword scoring, reviews. Zero-dependency stdio bridge to the hosted Streamable HTTP endpoint.
We found that @getappniche/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.