
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
Model Context Protocol (MCP) server that controls Xcode directly through JavaScript for Automation (JXA).
brew install xclogparserXCLogParser is recommended but optional:
brew install xclogparser
Run directly with npx:
npx -y xcodemcp@latest
Or install globally:
npm install -g xcodemcp
Add to your MCP configuration:
{
"mcpServers": {
"xcodemcp": {
"command": "npx",
"args": ["-y", "xcodemcp@latest"],
"env": {
"LOG_LEVEL": "INFO"
}
}
}
}
To add XcodeMCP to Claude Code using the command line:
claude mcp add-json XcodeMCP '{
"command": "npx",
"args": ["-y", "xcodemcp@latest"],
"env": {
"LOG_LEVEL": "INFO"
}
}'
For local development:
git clone https://github.com/lapfelix/XcodeMCP.git
cd XcodeMCP
npm install
# Run in development mode (TypeScript)
npm run dev:ts
# Or build and run compiled version
npm run build
npm start
Project Management:
xcode_open_project - Open projects and workspacesxcode_get_workspace_info - Get workspace status and detailsxcode_get_projects - List projects in workspacexcode_open_file - Open files with optional line numberBuild Operations:
xcode_build - Build with detailed error parsingxcode_clean - Clean build artifactsxcode_test - Run tests with optional argumentsxcode_run - Run the active schemexcode_debug - Start debugging sessionxcode_stop - Stop current operationConfiguration:
xcode_get_schemes - List available schemesxcode_set_active_scheme - Switch active schemexcode_get_run_destinations - List simulators and devicesXCResult Analysis:
xcresult_browse - Browse test results and analyze failuresxcresult_browser_get_console - Get console output for specific testsxcresult_summary - Quick overview of test resultsxcresult_get_screenshot - Extract screenshots from test failuresxcresult_get_ui_hierarchy - Get UI hierarchy as AI-readable JSON with timestamp selectionxcresult_get_ui_element - Get detailed properties of specific UI elements by indexxcresult_list_attachments - List all attachments for a testxcresult_export_attachment - Export specific attachments from test resultsDiagnostics:
xcode_health_check - Environment validation and troubleshootingXcodeMCP provides comprehensive tools for analyzing Xcode test results (.xcresult files), making it easy to debug test failures and extract valuable information:
t=type, l=label, f=frame, c=children, j=index)# Browse test results
xcresult_browse "/path/to/TestResults.xcresult"
# Get console output to find failure timestamps
xcresult_browser_get_console "/path/to/TestResults.xcresult" "MyTest/testMethod()"
# Get UI hierarchy at specific timestamp (AI-readable slim version)
xcresult_get_ui_hierarchy "/path/to/TestResults.xcresult" "MyTest/testMethod()" 45.25
# Get full UI hierarchy (with size warning)
xcresult_get_ui_hierarchy "/path/to/TestResults.xcresult" "MyTest/testMethod()" 45.25 true
# Get detailed properties of a specific UI element
xcresult_get_ui_element "/path/to/ui_hierarchy_full.json" 15
# Extract screenshot at failure point
xcresult_get_screenshot "/path/to/TestResults.xcresult" "MyTest/testMethod()" 30.71
XcodeMCP supports configurable logging to help with debugging and monitoring:
LOG_LEVEL: Controls logging verbosity (default: INFO)
SILENT: No logging outputERROR: Only error messagesWARN: Warnings and errorsINFO: General operational information (recommended)DEBUG: Detailed diagnostic informationXCODEMCP_LOG_FILE: Optional file path for logging
/tmp/xcodemcp.log or ~/Library/Logs/xcodemcp.logXCODEMCP_CONSOLE_LOGGING: Enable/disable console output (default: true)
false to disable stderr logging (useful when using file logging only)Debug logging with file output:
{
"mcpServers": {
"xcodemcp": {
"command": "npx",
"args": ["-y", "xcodemcp@latest"],
"env": {
"LOG_LEVEL": "DEBUG",
"XCODEMCP_LOG_FILE": "~/Library/Logs/xcodemcp.log"
}
}
}
}
Silent mode (no logging):
{
"mcpServers": {
"xcodemcp": {
"command": "npx",
"args": ["-y", "xcodemcp@latest"],
"env": {
"LOG_LEVEL": "SILENT"
}
}
}
}
File-only logging:
{
"mcpServers": {
"xcodemcp": {
"command": "npx",
"args": ["-y", "xcodemcp@latest"],
"env": {
"LOG_LEVEL": "INFO",
"XCODEMCP_LOG_FILE": "/tmp/xcodemcp.log",
"XCODEMCP_CONSOLE_LOGGING": "false"
}
}
}
}
All logs are properly formatted with timestamps and log levels, and stderr output maintains compatibility with the MCP protocol.
If you see a warning that XCLogParser is not found even though it's installed:
Verify installation:
which xclogparser
xclogparser version
Common issues and solutions:
PATH issue: If which xclogparser returns nothing, add the installation directory to your PATH:
# For Homebrew on Intel Macs
export PATH="/usr/local/bin:$PATH"
# For Homebrew on Apple Silicon Macs
export PATH="/opt/homebrew/bin:$PATH"
Wrong command: Older documentation may reference xclogparser --version, but the correct command is xclogparser version (without dashes)
Permission issue: Ensure xclogparser is executable:
chmod +x $(which xclogparser)
Environment validation: Run the health check to get detailed diagnostics:
echo '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "xcode_health_check", "arguments": {}}}' | npx xcodemcp
Note: XcodeMCP can operate without XCLogParser, but build error parsing will be limited.
Build with errors:
❌ BUILD FAILED (2 errors)
ERRORS:
• /path/HandsDownApp.swift:7:18: Expected 'func' keyword in instance method declaration
• /path/MenuBarManager.swift:98:13: Invalid redeclaration of 'toggleItem'
Health check:
✅ All systems operational
✅ OS: macOS environment detected
✅ XCODE: Xcode found at /Applications/Xcode.app (version 16.4)
✅ XCLOGPARSER: XCLogParser found (XCLogParser 0.2.41)
✅ OSASCRIPT: JavaScript for Automation (JXA) is available
✅ PERMISSIONS: Xcode automation permissions are working
FAQs
Model Context Protocol server for Xcode build automation and log parsing
The npm package xcodemcp receives a total of 37 weekly downloads. As such, xcodemcp popularity was classified as not popular.
We found that xcodemcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.