ipatool

Open source alternative to iMazing

11.8K stars
MIT
Active this week
Last commit 1 day ago

Last verified Oct 21, 2026

Search and download iOS, iPadOS, tvOS, and visionOS app packages from the Apple App Store via the command line. MIT-licensed CLI written in Go.

Visit website GitHub11.8K

Read the full breakdownWho it is for, how it works, trade-offs, the quick start and the FAQ

who it's for

Who ipatool is for#

iOS security researchers analyzing app binaries

Security researchers use ipatool to download specific app versions for static analysis, reverse engineering, and vulnerability research. The `list-versions` and `download --external-version-id` commands let researchers pull a known build directly rather than relying on third-party archive sources.

Skip if:

Skip if your workflow requires the decrypted binary rather than the encrypted IPA. ipatool downloads the package as Apple distributes it; decryption requires a separate process outside this tool.

Mobile QA engineers running regression tests against App Store builds

QA teams script ipatool in CI pipelines to pull specific App Store builds for regression testing against real artifacts. The `--non-interactive` flag and JSON output make integration into GitHub Actions or other automated test runners straightforward.

Skip if:

Skip if your regression tests can use simulator builds from Xcode instead. ipatool is most valuable when you specifically need the App Store-signed, distributed artifact rather than a local build.

Developers archiving their own App Store release history

Developers and publishers who want a local archive of every version they have shipped can script ipatool to pull each released IPA after submission. Combined with `list-versions`, this creates a reproducible record of all distributed builds without relying on App Store Connect retention.

Skip if:

Skip if you already archive builds through your CI system at submission time. ipatool is an alternative archive path for teams that did not set up archival when the builds originally shipped.

Enterprise security teams auditing third-party iOS apps

Enterprise security teams auditing third-party apps installed by employees can use ipatool to obtain IPA files for static analysis in mobile application security testing workflows. The cross-platform binary works on Linux-based analysis infrastructure without needing a Mac in the chain.

Skip if:

Skip if you need to audit apps distributed outside the public App Store, such as enterprise-distributed apps. ipatool works only with App Store-listed apps accessible to a standard Apple ID.

the problem

The problem it solves#

Accessing specific IPA files from the Apple App Store without a Mac and Xcode is harder than it should be. Security researchers who need to pull a prior app version for vulnerability analysis, QA engineers who want to test a specific App Store build in a regression suite, and developers building CI pipelines around app artifacts all face the same bottleneck: Apple's official tooling assumes a physical device or macOS with Xcode in the loop.

Most teams end up buying a paid desktop tool designed primarily for device management, or manually working through workflows that Apple has repeatedly deprecated and changed. Neither approach works cleanly in headless or automated environments. A scriptable, cross-platform interface to the App Store's IPA download mechanism has been missing from the open source toolkit.

how ipatool solves it

How it solves it#

App Store search across iOS, iPadOS, tvOS, and visionOS

Search for apps by keyword on any Apple platform from the command line. The `--platform` flag selects iphone, ipad, appletv, or visionos; the `--limit` flag controls how many results to return, up to 12 for visionOS. Results include bundle identifier and app ID, which feed directly into the download step.

Version-specific IPA download

List all available versions of an app with `list-versions`, then target a specific build using its external version identifier with `download --external-version-id`. This lets security researchers and QA teams retrieve older releases for regression testing or vulnerability analysis, not just the current App Store version.

JSON output for shell scripting

Every command outputs plain text by default and switches to machine-readable JSON with `--format json`. This makes it straightforward to pipe ipatool into jq, Python, or any shell script that processes bundle identifiers, app IDs, version lists, or download paths programmatically.

Non-interactive mode for CI pipelines

The `--non-interactive` flag disables all prompts, so ipatool runs cleanly in Docker containers, GitHub Actions runners, and other headless automation environments. Credentials are stored in a keychain with an optional `--keychain-passphrase` flag for secure automated unlocking.

Cross-platform single binary

Runs on Windows, Linux, and macOS with no runtime dependencies beyond the binary itself. Install via Homebrew on macOS or compile from source with the Go toolchain using `go build -o ipatool`. No Xcode, no Mac, and no GUI framework required.

strengths · trade-offs

Strengths and trade-offs#

Strengths

MIT license with no per-seat costThe MIT license means you can use, modify, and redistribute ipatool in commercial workflows or internal tooling without restriction. Unlike iMazing and similar proprietary tools, there is no subscription, no license expiration, and no per-seat fee. You pay only for the server or workstation running the binary.
Over 10,000 GitHub stars and actively maintainedWith more than 10,000 stars, 886 forks, and a last push in August 2026, ipatool has a large following for a focused CLI tool and tracks App Store API changes across iOS, iPadOS, tvOS, and visionOS as Apple's platform landscape evolves.
Cross-platform IPA access without Apple hardwareMost IPA download methods require a Mac. ipatool runs on Linux and Windows too, which means security researchers and CI systems on non-Apple infrastructure can pull App Store IPA files without any Apple device or macOS in the pipeline.
Structured metadata suited for automationEvery command exposes app IDs, bundle identifiers, external version identifiers, and purchase dates in a consistent format. Combined with JSON output, this makes ipatool a composable building block for larger automation workflows rather than a one-off download helper.

Trade-offs

-Requires a valid Apple ID with App Store accessipatool authenticates as a real Apple ID user. You can only download apps your account has purchased or obtained a license for via the `purchase` command. Automated or high-frequency use carries risk of Apple challenging or restricting the account, so heavy pipeline use should be tested carefully against Apple's Terms of Service.
-Downloads Apple-encrypted IPA files onlyThe README explicitly describes downloads as '(encrypted)'. ipatool retrieves the IPA package exactly as the App Store distributes it, with Apple's encryption intact. Security research workflows that require inspecting the decrypted app binary need a separate decryption step; ipatool does not handle this.
-No device management or file transfer capabilitiesipatool is limited to App Store search, license acquisition, and IPA download. It does not support device backups, file transfer to and from devices, contacts management, or message export. Teams that need full iOS device management alongside IPA access must use a separate tool.

versus alternatives

ipatool vs alternatives#

ipatool vs iMazing

iMazing is a paid desktop application for managing iOS devices and downloading IPA files from the App Store. ipatool covers the IPA download and search subset of that functionality from the command line, on any operating system.

Feature	ipatool	iMazing
License	MIT	Proprietary
Price	Free	Paid commercial license
Platform	Windows, Linux, macOS	macOS, Windows
Interface	CLI	GUI
App Store search	Yes	Yes
IPA download	Yes	Yes
Version-specific download	Yes (by version ID)	Yes
Device backup	No	Yes
Device file transfer	No	Yes
Contacts and messages	No	Yes
Scriptable for CI	Yes	No

ipatool is the better choice when IPA access is the specific requirement and the environment is headless or non-macOS. A Linux CI runner pulling app builds for security analysis, a QA pipeline scripting version-specific downloads, or a researcher archiving App Store history all benefit from ipatool's automation-first design. The MIT license means no license costs, no per-seat fees, and no expiration.

iMazing is worth considering when you need full device management from a desktop GUI. It excels at iOS device backups, contacts export, message archival, and file transfer to and from the device filesystem. For a developer or IT administrator managing multiple devices on macOS, iMazing's GUI and device management capabilities extend well beyond what ipatool offers. If IPA download is one of several device management tasks you need from a single desktop tool, iMazing is the more complete commercial option.

install · quick start

Quick start#

bash

Install ipatool on macOS via Homebrew, or compile from source using the Go toolchain on any supported platform.
```bash
brew install ipatool
```

tech stack · detected from GitHub

What it's built on#

Languages: GoSwift

frequently asked

FAQ#

Does ipatool work on Linux and Windows, or only macOS?

ipatool runs on Windows, Linux, and macOS. It is a stateless Go binary with no Apple platform dependencies. You need a valid Apple ID configured for App Store use, but you do not need a Mac or any Apple hardware. On macOS, install via Homebrew; on Linux and Windows, download a prebuilt binary from the GitHub releases page or compile from source with the Go toolchain.

Can ipatool download any App Store app, or only apps I have purchased?

ipatool can download free apps by first running the purchase command to obtain a license, then running download. For paid apps, the authenticated Apple ID must have already purchased them through the App Store. ipatool automates the download step but cannot bypass payment; it only retrieves apps your account is legitimately entitled to.

Does ipatool download the decrypted IPA?

No. ipatool downloads the IPA exactly as Apple distributes it from the App Store, which is encrypted. The README labels the download command as retrieving '(encrypted)' packages. Security research workflows that require inspecting the decrypted binary need a separate decryption step, typically performed on jailbroken hardware, after the download.

How does ipatool compare to iMazing for downloading IPA files?

Both tools can download IPA files from the App Store, but they differ significantly in scope and environment. ipatool is a free, MIT-licensed CLI that runs on Windows, Linux, and macOS and works without a GUI, making it well suited for automation and CI pipelines. iMazing is a paid desktop application that pairs IPA download with broader iOS device management features including backups, file transfer, and message export. For headless or scripted IPA access, ipatool is the better fit; for GUI-based device management alongside IPA downloads, iMazing covers more ground.

Can ipatool download a specific older version of an app, not just the latest?

Yes. Run list-versions with the app's ID or bundle identifier to retrieve all available versions and their external version identifiers. Then pass the specific identifier to download --external-version-id to retrieve that exact build. This version-selection capability is one of ipatool's primary use cases for security research and regression testing.

also worth a look

Similar open-source tools#

hysteria

Alternative toAstrill VPN

Fast and censorship-resistant proxy solution

22,692 GitHub stars
Licence MIT

REA (Reverse Engineer Anything)

Featured

Alternative toRevEng.AI

AI-powered reverse engineering for binaries, apps, and assemblies.

345,900 GitHub stars
Licence MIT

Unkey

Alternative toKong Konnect

Unified API keys, gateways, and observability for developers.

5,471 GitHub stars
Licence FSL-1.1-ALv2

WebCheck-OSINT

Alternative toShodan

44-check OSINT scanner for DNS, SSL, ports, CVEs, and TLS audits

343 GitHub stars
Licence MIT

Jadx

Alternative toJEB Decompiler

Free APK and DEX decompiler with GUI, navigation, and deobfuscation.

51,113 GitHub stars
Licence Apache-2.0

Statlite

InSecurity & Monitoring

Self-hosted Spring Boot monitoring, no Prometheus or Grafana needed

177 GitHub stars
Licence MIT

by category

Open source tools in these categories#

463

12,712 GitHub stars
Licence AGPL-3.0
#Email

rakazo

Alternative toGrok Bot

AI teammates you own: your keys, your model, your machine.

4,904 GitHub stars
Licence Apache-2.0
#AI Agents

Omnara

Alternative toClaude Managed Agents

Open-source agent deployment API. Self-host or use Omnara Cloud.

2,957 GitHub stars
Licence Apache-2.0
#AI Agents

Feature your project

The projects we add and every new guide. Free, unsubscribe any time.

Find open source alternatives to paid software

ipatool vs iMazing

Feature	ipatool	iMazing
License	MIT	Proprietary
Price	Free	Paid commercial license
Platform	Windows, Linux, macOS	macOS, Windows
Interface	CLI	GUI
App Store search	Yes	Yes
IPA download	Yes	Yes
Version-specific download	Yes (by version ID)	Yes
Device backup	No	Yes
Device file transfer	No	Yes
Contacts and messages	No	Yes
Scriptable for CI	Yes	No

Who ipatool is for#

iOS security researchers analyzing app binaries

Skip if:

Mobile QA engineers running regression tests against App Store builds

Skip if:

Developers archiving their own App Store release history

Skip if:

Enterprise security teams auditing third-party iOS apps

Skip if:

The problem it solves#

How it solves it#

App Store search across iOS, iPadOS, tvOS, and visionOS

Version-specific IPA download

JSON output for shell scripting

Non-interactive mode for CI pipelines

Cross-platform single binary

Strengths and trade-offs#

Strengths

Trade-offs

ipatool vs alternatives#

ipatool vs iMazing

Quick start#

What it's built on#

FAQ#

Similar open-source tools#

Open source tools in these categories#

Developer Tools

Web & App Development

Security & Monitoring

Find open source alternatives to paid software

Who ipatool is for#

iOS security researchers analyzing app binaries

Skip if:

Mobile QA engineers running regression tests against App Store builds

Skip if:

Developers archiving their own App Store release history

Skip if:

Enterprise security teams auditing third-party iOS apps

Skip if:

The problem it solves#

How it solves it#

App Store search across iOS, iPadOS, tvOS, and visionOS

Version-specific IPA download

JSON output for shell scripting

Non-interactive mode for CI pipelines

Cross-platform single binary

Strengths and trade-offs#

Strengths

Trade-offs

ipatool vs alternatives#

ipatool vs iMazing

Quick start#

What it's built on#

FAQ#

Similar open-source tools#

Open source tools in these categories#

Developer Tools

Web & App Development

Security & Monitoring

Find open source alternatives to paid software