Impactor

io.github.YeetDisDude由 GitHub 帳號 YeetDisDude 發布v2.7.0更新於 Oct 27, 2026

Sign, install and manage sideloaded iOS apps with the Impactor sideloader.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

讓助理驅動 Impactor 側載工具:以 Apple ID 登入、管理開發者入口資源,並為已連線的裝置簽署與安裝 .ipa 檔。

可以做什麼
  • 登入 Apple ID 帳號、提交兩步驟驗證碼、切換團隊並管理已儲存帳號
  • 列出、註冊與撤銷開發者入口的憑證、裝置、App ID 與 App 群組,並下載描述檔
  • 列出已配對裝置、檢視已安裝 App、配對裝置並安裝 App、描述檔或配對檔
  • 檢查安裝包,並為 .ipa 簽署安裝,支援外掛、自訂名稱、Bundle ID、版本、圖示與權限
  • 讀取與修改 Mach-O 二進位檔
  • 追蹤已安裝 App,並在 7 天描述檔到期前重新簽署
適用情境
適合以 Impactor 側載 iOS App、並希望由助理處理重複步驟的情境:登入、註冊裝置、帶外掛簽署安裝 .ipa,以及在免費帳號安裝到期前維持更新。
執行需求
以本機 stdio 程序在桌機上執行,可透過 .mcpb 擴充套件、安裝腳本或 cargo 安裝。Windows 需要 iTunes 或 Apple Devices 以存取裝置;Linux 需要 usbmuxd。簽署需要 Apple ID。從原始碼建置需要 Rust 與平台建置工具。選用的自動更新以 IMPACTOR_MCP_AUTO_REFRESH=1 開啟。
安裝前請注意
它會處理 Apple ID 憑證與開發者憑證:account_login 會開啟本機登入頁,讓密碼不經過對話,但允許的用戶端仍可直接傳入 email 與 password。簽署、安裝、撤銷憑證與刪除 App ID 會改動真實帳號與裝置;allow_certificate_reset 可能導致現有 SideStore/AltStore 安裝失效。它與 Impactor 共用資料目錄,自動更新只應在兩者之一開啟。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Impactor,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

[impactor-mcp]

Impactor MCP server

[impactor-mcp: sign and install iOS apps from your AI agent]

An MCP server that lets any AI agent or MCP client (Claude, Cursor, VS Code Copilot, Windsurf, ...) do everything the Impactor sideloader does: sign in with an Apple ID (including 2FA), manage developer-portal certificates/devices/app IDs, sign and install .ipa files with tweaks and customizations, install pairing files, and keep apps refreshed before they expire.

It is a standalone add-on. It builds against the official Impactor release (v2.7.0, fetched by Cargo) and shares Impactor's data directory, so it works next to the stock Impactor app — you never need a modified build of the app. Accounts you log into in the app show up here and vice versa.

Made by Claude. This MCP server, its installers and this README were written by Claude (Anthropic's AI model) via Claude Code. It is an unofficial companion project, not affiliated with or endorsed by the Impactor authors.

What it does

One request from the agent becomes the same steps you would click through in the Impactor app:

[Tool calls and output for a single install request]

[Architecture: agent, impactor-mcp, Apple Developer services, devices and the Impactor app]

Install

One line, nothing to clone or download by hand:

Windows (PowerShell):

powershell
irm https://raw.githubusercontent.com/YeetDisDude/impactor-mcp/main/install.ps1 | iex

macOS / Linux:

sh
curl -fsSL https://raw.githubusercontent.com/YeetDisDude/impactor-mcp/main/install.sh | sh

The installer downloads the prebuilt binary for your platform from the latest release (no Rust needed). If there is none for your platform, it builds from source with cargo, installing Rust first if needed. It then installs the binary to %LOCALAPPDATA%\impactor-mcp\impactor-mcp.exe (Windows) or ~/.local/bin/impactor-mcp, and registers it with Claude Code (claude mcp add, user scope) and Claude Desktop (claude_desktop_config.json, a .bak copy is kept). Restart Claude Desktop afterwards. Running install.ps1 / install.sh from a local clone also downloads the prebuilt binary; it only compiles (that clone) with -FromSource / --from-source or when no prebuilt binary exists for your platform.

Claude Desktop (one click): download impactor-mcp.mcpb from the latest release and open it. Claude Desktop installs it as an extension. The server is also listed in the MCP Registry as io.github.YeetDisDude/impactor-mcp.

Passing options:

powershell
& ([scriptblock]::Create((irm https://raw.githubusercontent.com/YeetDisDude/impactor-mcp/main/install.ps1))) -AutoRefresh
sh
curl -fsSL https://raw.githubusercontent.com/YeetDisDude/impactor-mcp/main/install.sh | sh -s -- --auto-refresh
Option (ps1 / sh)Effect
-NoClaudeCode / --no-claude-codeDon't register with Claude Code
-NoDesktop / --no-desktopDon't touch the Claude Desktop config
-AutoRefresh / --auto-refreshRefresh saved apps in the background (see below)
-FromSource / --from-sourceBuild with cargo instead of downloading a prebuilt binary
-NoAutoRefresh / --no-auto-refreshTurn auto-refresh off when updating
-Uninstall / --uninstallRemove the binary and both registrations

Updating

Run the same install command again. It replaces the binary with the latest release, even while Claude is using it, and keeps your auto-refresh setting. Then restart Claude Desktop and any running Claude Code sessions so they load the new version. If you installed the .mcpb extension, download and open the new impactor-mcp.mcpb instead. If you used cargo install, re-run it with --force.

Requirements

  • Windows: iTunes or Apple Devices (Microsoft Store) for device access.
  • Linux: usbmuxd.
  • Only when building from source: the MSVC C++ build tools on Windows (winget install Microsoft.VisualStudio.2022.BuildTools), Xcode command line tools on macOS.

Manual setup

sh
cargo install --locked --git https://github.com/YeetDisDude/impactor-mcp impactor-mcpclaude mcp add --scope user impactor -- ~/.cargo/bin/impactor-mcp

Any other MCP client (Cursor, VS Code, Windsurf, Cline, ...) uses the same stdio entry in its MCP config:

json
{ "mcpServers": { "impactor": { "command": "/absolute/path/to/impactor-mcp", "args": [] } } }

Tools

[Tool reference: all 36 tools in six groups]

AreaTools
Accountsaccount_list, account_login, account_submit_2fa, account_cancel_login, account_switch, account_remove, account_teams, account_set_team, settings_set_locale
Developer portalportal_account_info, portal_list_certificates, portal_revoke_certificate, portal_list_devices, portal_register_device, portal_list_app_ids, portal_delete_app_id, portal_list_app_groups, portal_download_profile, portal_export_certificate
Devicesdevice_list, device_info, device_pair, device_list_apps, device_install_app, device_install_pairing_file, device_install_profile, device_is_app_installed
Signingpackage_inspect, sign_and_install, sign_list_app_types
Mach-Omacho_info, macho_edit
Auto-refreshrefresh_list, refresh_app_now, refresh_run_due, refresh_forget_app

sign_and_install covers the app's whole install screen: Apple ID / ad-hoc / PEM / no-modify signing, install and/or export, custom name / bundle id / version / icon / entitlements, single profile, tweaks (.deb, .dylib, .framework, .bundle, .appex), the feature toggles (minimum OS, file sharing, iPad fullscreen, game mode, ProMotion, Liquid Glass, ElleKit), pairing-file installation and saving for auto-refresh. Long operations report MCP progress notifications.

Example prompts:

  • "Log me into Impactor with my Apple ID" (a sign-in page opens in your browser)
  • "Sign ~/Downloads/SideStore.ipa and install it on my iPhone, and keep it refreshed"
  • "Inject this tweak into the app and export the signed ipa to my desktop"

Notes

  • Signing in. account_login opens a sign-in page on 127.0.0.1 in your browser. You type your Apple ID, password and 2FA code there, so the password never goes through the agent or its conversation. The agent waits for the result. Clients that allow it can still pass email and password directly.
  • Apple's -80045 block (October 2026). Apple started rejecting the client info that anisette servers reported, so every Impactor login failed with -80045. This is fixed upstream in Impactor v2.7.0, which this server builds against; no local workaround is needed.
  • Certificate resets. Free accounts can hold only a few development certificates. When a new one is needed and the limit is hit, tools fail with a hint instead of revoking anything. Pass allow_certificate_reset: true only if you accept that existing SideStore/AltStore installs break.
  • Auto-refresh. Apps installed with refresh: true are re-signed before their 7-day profile expires when you call refresh_run_due, or automatically every 3 minutes when the server runs with IMPACTOR_MCP_AUTO_REFRESH=1. The Impactor app has its own refresh daemon; enable auto-refresh in only one of them.
  • Shared data. Both use accounts.json in %APPDATA%\PlumeImpactor (Windows) or ~/.config/PlumeImpactor. The app keeps a copy in memory, so changes made here (e.g. a new login) may need an app restart to appear there.
  • Logs go to stderr (stdout is the protocol channel). Set RUST_LOG=debug for detail.
  • Following newer Impactor releases: bump the tag values in Cargo.toml and run cargo update.

Releasing

Pushing a tag such as v2.7.0 runs .github/workflows/release.yml. It builds Windows, macOS and Linux binaries (x86_64 and arm64) and attaches them to the GitHub release that the installers download from.

Credits

Built on Impactor by claration (MIT) and idevice. The MCP server itself was made by Claude.

來源:README.md,提交 7269a04

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

2
  1. v2.7.0最新Oct 17, 2026
  2. v2.6.5Oct 13, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。