Back to Home
cameroncooke icon

XcodeBuildMCP

by cameroncooke

Overview

Provides an MCP (Model Context Protocol) server for AI agents and other clients to programmatically build, test, run, and debug iOS and macOS applications, manage simulators/devices, and capture logs.

Installation

Run Command
node build/index.js

Environment Variables

  • XCODEBUILDMCP_ENABLED_WORKFLOWS
  • XCODEBUILDMCP_DEBUGGER_BACKEND
  • XCODEMAKE_ENABLED
  • XBMCP_LAUNCH_JSON_WAIT_MS
  • XCODEBUILDMCP_IOS_TEMPLATE_PATH
  • XCODEBUILD_MCP_IOS_TEMPLATE_VERSION
  • XCODEBUILDMCP_MACOS_TEMPLATE_PATH
  • XCODEBUILD_MCP_MACOS_TEMPLATE_VERSION
  • XCODEBUILDMCP_AXE_PATH
  • AXE_PATH
  • XCODEBUILDMCP_DISABLE_SESSION_DEFAULTS
  • XCODEBUILDMCP_UI_DEBUGGER_GUARD_MODE
  • XCODEBUILDMCP_DEBUG
  • XCODEBUILDMCP_SILENCE_LOGS
  • SENTRY_DSN
  • SENTRY_ENVIRONMENT
  • SENTRY_RELEASE

Security Notes

The server downloads external binaries (xcodemake) and project templates from specific GitHub repositories, which presents a supply chain risk if these repositories are compromised. Command execution heavily relies on `child_process.spawn` with `useShell: true` for Xcode-related commands. Many tools pass user-provided `extraArgs` directly to these shell commands without explicit sanitization within the tool's logic, creating a potential shell injection vulnerability if client-side input is not strictly controlled. While Zod is used for schema validation, it cannot fully mitigate shell interpretation of valid strings. The server operates with privileges necessary for Xcode development, meaning an exploit could lead to sensitive operations (e.g., code signing, system access).

Similar Servers

Stats

Interest Score100
Security Score5
Cost ClassMedium
Avg Tokens2000
Stars3744
Forks168
Last Update2026-01-17

Tags

XcodeiOSmacOSSimulatorDeviceBuild AutomationTestingDebuggingLoggingCI/CDAgent Tools