ipatool — Command-Line Tool for Downloading iOS App Packages

Introduction

ipatool is a Go-based command-line utility that interfaces with the Apple App Store to search for and download IPA (iOS application package) files. It enables developers and researchers to obtain app binaries for analysis, testing, or archival purposes.

What ipatool Does

• Authenticates with the Apple App Store using Apple ID credentials
• Searches the App Store catalog by keywords or bundle identifiers
• Downloads IPA files for apps that the authenticated account has access to
• Supports downloading specific app versions when available
• Outputs app metadata including bundle ID, version, and file size

Architecture Overview

ipatool is a single Go binary that communicates with Apple's iTunes Store API. Authentication uses Apple's standard login flow including support for two-factor authentication. Downloads are performed through the official App Store content delivery endpoints. The tool stores authentication tokens locally for session persistence.

Self-Hosting & Configuration

• Install via Homebrew, AUR, or download prebuilt binaries from GitHub Releases
• Requires an Apple ID that has previously downloaded or purchased the target app
• Auth tokens are cached locally to avoid repeated login prompts
• Supports two-factor authentication via interactive prompts
• Can be integrated into CI/CD scripts for automated app retrieval

Key Features

• Direct App Store access without needing a macOS machine or Xcode
• Support for Apple two-factor authentication
• JSON output mode for scripting and automation
• Cross-platform binary available for Linux, macOS, and Windows
• Lightweight single binary with no runtime dependencies

Comparison with Similar Tools

• Apple Configurator — GUI-based, macOS only; ipatool is cross-platform CLI
• iTunes (legacy) — discontinued IPA download support; ipatool fills that gap
• libimobiledevice — device communication tools; ipatool focuses on App Store downloads
• Frida/objection — runtime analysis tools; ipatool handles the acquisition step
• Manual App Store download — requires iOS device; ipatool downloads directly to any computer

FAQ

Q: Do I need a paid Apple Developer account? A: No. A free Apple ID works, but you can only download apps you have previously obtained.

Q: Can I download apps I haven't purchased? A: No. Apple's API requires that the authenticated account has access to the app.

Q: Does it support two-factor authentication? A: Yes. ipatool prompts for the 2FA code interactively during login.

Q: Is this legal? A: Downloading apps you own for personal research is generally permitted. Redistribution of IPA files may violate Apple's terms of service.

Sources

• https://github.com/majd/ipatool