Atlas / MCP servers / thenavidm / apple-podcasts-mcp-cli

apple-podcasts-mcp-cliSAFE

mcp/thenavidm/apple-podcasts-mcp-cli

Apple Podcasts MCP server and CLI for Claude Code, Codex and AI agents. 32 tools for podcast search, chart rank tracking, listener reviews, RSS feed parsing and validation, on-device transcript search, and Apple Podcasts Connect analytics.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
26 25r · 1w · 0d
Transport
—
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/thenavidm/apple-podcasts-mcp-cli/blob/main/LICENSE) [](https://www.npmjs.com/package/@thenavidm/apple-podcasts-mcp-cli) [](https://youtube.com/@thenavidm?sub_confirmation=1) [](https://x.com/thenavidm) [](https://linkedin.com/in/thenavidm)

Apple Podcasts MCP server and CLI for Claude Code, Codex and AI agents. 32 tools for podcast search, chart rank tracking, listener reviews, RSS feed parsing and validation, on-device transcript search, and Apple Podcasts Connect analytics.

One install gives you both surfaces, the same 32 tools under the same names, reading one array of tool definitions so they cannot drift apart.

It searches Apple's catalog and checks where a show ranks in each country.

It reads listener reviews and parses any podcast's RSS feed.

If you own a show, it pulls your listening numbers too.

Nothing here needs an account, except the owner analytics.

There are 32 tools, and only the five that read your own show's analytics need an account of any kind.

Built and maintained by Navid Moazzez. Built on Slipway, which turns one definition of each tool into the MCP server and the CLI.

Two ways to use it

Command line

`app

Read from source at commit e24627526f6eOBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add apple-podcasts-mcp-cli --env APPLE_PODCASTS_REPORTER_TOKEN=${APPLE_PODCASTS_REPORTER_TOKEN} -- npx -y @thenavidm/[email protected]
claude-desktop
{
  "mcpServers": {
    "apple-podcasts-mcp-cli": {
      "command": "npx",
      "args": [
        "-y",
        "@thenavidm/[email protected]"
      ],
      "env": {
        "APPLE_PODCASTS_REPORTER_TOKEN": "${APPLE_PODCASTS_REPORTER_TOKEN}"
      }
    }
  }
}
03

Exposed tools (26)

25 read · 1 write · 0 destructive.

ToolRiskDescription
check_analytics_accessreadVerify the Apple Podcasts Connect credentials and list the vendor numbers this access token can read. Call this first: it is the cheapest way to tell a wrong token from a wrong vendor number from a show that simply has no data yet. Returns no listening data of its own.
feed-checkupreadCheck a podcast feed before it costs you listeners
find_chart_positionreadFind where one show sits in Apple
find_similar_showsreadFind shows adjacent to a given one, by searching its genre and its own subject matter and removing itself from the results. Apple publishes no
find_transcriptswriteList episodes of a show that publish a transcript in their feed, with the URL, format and language of each. These are Podcasting 2.0 transcripts the show chose to publish, and unlike Apple
get_episode_analyticsreadPlays and listener counts per episode for one reporting period, ranked. This is the report that says which episode actually worked, which no public data can tell you. Listener counts are devices, not people. Needs Apple Podcasts Connect credentials.
get_feed_episodereadFind one episode in a show
get_followersreadFollower numbers for your show across a reporting period, from Apple
get_library_episodereadOne episode by its local id, with complete show notes and the whole cached transcript excerpt rather than a trimmed one. Local ids come from search_library and the other library tools.
get_podcastreadFull catalog record for one show: name, author, genres, episode count, latest release date, artwork and its RSS feed URL. Takes an Apple id or a pasted Apple Podcasts URL. The feed URL it returns is the way into the complete episode backlog through get_feed.
get_podcast_episodesreadRecent episodes for a show from Apple
get_reviewsreadRecent listener reviews for a show, with rating, title and full text. Reviews are per storefront and do not aggregate, so reading only one country reads only that country
get_show_analyticsreadPlays and listener counts for your show over one reporting period, from Apple Podcasts Connect. Listener counts are devices rather than people: one person listening on a phone and a speaker counts twice, and Apple has no way to collapse them. Needs Apple Podcasts Connect credentials.
get_show_profilereadA complete picture of one show: its catalog record, where it ranks across storefronts, what listeners are saying and how they rate it, how often it publishes, and whether it offers transcripts. This is the tool to reach for when the question is
list_genresreadApple
list_recent_episodesreadThe most recently published episodes across the shows you follow, newest first. This is the local database
list_saved_episodesreadEpisodes flagged in the Podcasts app: saved, bookmarked, or downloaded to this Mac. This is the app
list_storefrontsreadThe storefronts this server sweeps by default, and the configured default. Apple operates a storefront for most countries and any two-letter code can be passed to the tools here; this is the working set, not the full list. Change it with APPLE_PODCASTS_STOREFRONTS.
list_subscriptionsreadEvery podcast in the Apple Podcasts library on this Mac, followed shows first. Each carries a local id, which the other library tools take, and Apple
niche-mapreadMap a podcast niche before entering it
resolve_apple_linkreadTake an Apple Podcasts URL someone pasted and return the show id, the episode id when the link points at one, and the storefront the link came from. Every other tool here is keyed by id, and Apple
search_episodesreadSearch Apple
search_libraryreadKeyword search across every episode of every show in your library: titles, show notes, and the transcript excerpts Apple has cached. This is the closest thing to full-text search over everything you follow, and it answers
search_podcastsreadSearch Apple
show-teardownreadTake apart a podcast: rank, audience, cadence and positioning
what-did-i-hearreadFind that thing you heard in a podcast
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (2)

LOWInventory / provenance · inv.hidden_file · CWE-1104
.mcpbignore
.mcpbignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@thenavidm/slipway, zod, @types/node, typescript, vitest
Why it matters. 5 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha e24627526f6efull audit observations/trust-audit/mcp-server/thenavidm__apple-podcasts-mcp-cli.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11e24627526f6eSAFEB89first audit
06

Questions

What is the apple-podcasts-mcp-cli MCP server?

Apple Podcasts MCP server and CLI for Claude Code, Codex and AI agents. 32 tools for podcast search, chart rank tracking, listener reviews, RSS feed parsing and validation, on-device transcript search, and Apple Podcasts Connect analytics.

What tools does apple-podcasts-mcp-cli expose?

26 in total: 25 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is apple-podcasts-mcp-cli safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does apple-podcasts-mcp-cli need?

It reads APPLE_PODCASTS_REPORTER_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How current is this page?

The grade is for one exact copy of the source (e24627526f6e), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement