AppInsightSAFE
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mseep.ai/app/jiantaofu-appinsightmcp)
An MCP server that provides comprehensive market intelligence by analyzing data from both the Apple App Store and Google Play Store. Get insights about apps, market trends, competitors, and user feedback across the major mobile app marketplaces.
API Coverage
App Store API Coverage
Google Play API Coverage
41eeff9c31bdOBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add app-insight-mcp -- npx -y @jeromyfu/[email protected]
{
"mcpServers": {
"app-insight-mcp": {
"command": "npx",
"args": [
"-y",
"@jeromyfu/[email protected]"
]
}
}
}Exposed tools (20)
20 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
app-store-details | read | Get detailed information about an App Store app. Returns an object with:\n |
app-store-developer | read | Get apps by a developer on the App Store. Returns a list of apps with:\n |
app-store-list | read | Get apps from iTunes collections. Returns a list of apps with:\n |
app-store-privacy | read | Get privacy details for an App Store app. Returns an object with:\n |
app-store-ratings | read | Get ratings for an App Store app. Returns an object with:\n |
app-store-reviews | read | Get reviews for an App Store app. Returns an array of reviews with:\n |
app-store-search | read | Search for apps on the App Store. Returns a list of apps with the following fields:\n |
app-store-similar | read | Get similar apps ( |
app-store-suggest | read | Get search suggestions from the App Store. Returns an array of objects with:\n |
app-store-version-history | read | Get version history for an App Store app. Returns an array of versions with:\n |
google-play-categories | read | Get list of all Google Play categories. Returns an array of category identifiers like:\n |
google-play-datasafety | read | Get data safety information for a Google Play app. Returns an object with:\n |
google-play-details | read | Get detailed information about a Google Play app. Returns an object with:\n |
google-play-developer | read | Get apps by a developer on Google Play. Returns a list of apps with:\n |
google-play-list | read | Get apps from Google Play collections. Returns a list of apps with:\n |
google-play-permissions | read | Get permissions required by a Google Play app. Returns a list of permissions with:\n |
google-play-reviews | read | Get reviews for a Google Play app. Returns an array of reviews with:\n |
google-play-search | read | Search for apps on Google Play. Returns a list of apps with:\n |
google-play-similar | read | Get similar apps from Google Play. Returns a list of apps with:\n |
google-play-suggest | read | Get search suggestions from Google Play. Returns an array of suggested search terms (up to 5).\n |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@modelcontextprotocol/sdk, @jeromyfu/app-store-scraper, @jeromyfu/google-play-scraper, punycode, chai, mocha
Gates applied: no_behavioural_pass.
41eeff9c31bdfull audit observations/trust-audit/mcp-server/jiantaofu__appinsight.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 41eeff9c31bd | SAFE | B | 89 | first audit |
Questions
What tools does AppInsight expose?
20 in total: 20 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is AppInsight safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does AppInsight need?
No credential environment variables were found in its source, so it appears to need none.
How does AppInsight run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @jeromyfu/app-insight-mcp at 1.0.8.
How current is this page?
The grade is for one exact copy of the source (41eeff9c31bd), read on 2026-10-09. The repository is watched and re-audited when it changes.