
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
playstore-mcp
Advanced tools
MCP server for Google Play Store — manage apps, releases, reviews, listings and more
An MCP (Model Context Protocol) server that wraps Google's Android Publisher API, giving AI assistants the ability to manage Play Store apps, releases, reviews, listings, and more — right from your IDE.
You need a Google Cloud service account with Play Console access. Here's how to set it up:
~/.google/play-service-account.json)client_email (found in the JSON key file, e.g. my-service-account@my-project.iam.gserviceaccount.com)Important: You need account owner or admin permissions in the Play Console to invite new users. If you don't have either role, ask someone who does to complete this step.
| Credential | Where to find it |
|---|---|
| Service Account JSON Key | Downloaded in step 7 — contains client_email, private_key, and project_id |
Note: The JSON key file can only be downloaded once when created. If lost, generate a new key from the Keys tab.
claude mcp add playstore \
--transport stdio \
--env GOOGLE_SERVICE_ACCOUNT_KEY_PATH=/absolute/path/to/service-account.json \
-- npx -y playstore-mcp
Add to your claude_desktop_config.json:
| OS | Path |
|---|---|
| macOS | ~/Library/Application Support/Claude/claude_desktop_config.json |
| Windows | %APPDATA%\Claude\claude_desktop_config.json |
{
"mcpServers": {
"playstore": {
"command": "npx",
"args": ["-y", "playstore-mcp"],
"env": {
"GOOGLE_SERVICE_ACCOUNT_KEY_PATH": "/absolute/path/to/service-account.json"
}
}
}
}
Add to .cursor/mcp.json in your project (or ~/.cursor/mcp.json for global):
{
"mcpServers": {
"playstore": {
"command": "npx",
"args": ["-y", "playstore-mcp"],
"env": {
"GOOGLE_SERVICE_ACCOUNT_KEY_PATH": "/absolute/path/to/service-account.json"
}
}
}
}
Verify under Cursor Settings → MCP after restarting.
Add to ~/.gemini/antigravity/mcp_config.json (or via Agent pane → MCP Servers → Manage MCP Servers → View raw config):
{
"mcpServers": {
"playstore": {
"command": "npx",
"args": ["-y", "playstore-mcp"],
"env": {
"GOOGLE_SERVICE_ACCOUNT_KEY_PATH": "/absolute/path/to/service-account.json"
}
}
}
}
Tip: Run
npx -y playstore-mcponce in your terminal first so the package is cached — Antigravity's first-run timeout can otherwise cause the server to fail to start.
| Tool | Description |
|---|---|
get_app_details | Get app details by package name |
list_tracks | List release tracks (production, beta, alpha, internal) |
get_track | Get details of a specific release track |
list_reviews | List user reviews for an app |
reply_to_review | Reply to a user review |
list_listings | List all store listings (all locales) |
get_listing | Get store listing for a specific locale |
update_listing | Update store listing for a locale |
list_inapp_products | List managed in-app products |
get_inapp_product | Get details of a specific in-app product |
list_subscriptions | List subscriptions for an app |
get_subscription | Get details of a specific subscription |
list_testers | List testers for a specific track |
update_testers | Update testers (Google Groups) for a track |
MIT
FAQs
MCP server for Google Play Store — manage apps, releases, reviews, listings and more
We found that playstore-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.