devicecheck

Server-side library to validate the authenticity of Apple App Attest artifacts, written in Kotlin.

Reduce fraudulent use of your services by managing device state and asserting app integrity via Apple DeviceCheck API with this Python wrapper.

A demo of Apple's App Attest using SwiftUI and Vapor.

Understand iOS 14's DeviceCheck and DCDevice classes.

Access per-device, per-developer data that your associated server can use in its business logic.

A Capacitor plugin to use Apple's DeviceCheck API

Swift SDK for OpenAI, Anthropic Claude, Google Gemini and other AI APIs. Streaming, async/await and HyperProxy gateway integration for iOS and macOS.

Apple App Attest for Swift — Secure Enclave request signing with the production failure modes handled. Zero dependencies.

Swift library for Apple App Attest — client wrapper + server-side verification (macOS & Linux).

Validates Apple App Attest attestations and assertions on your server, in Elixir.

Anonymous, attested usage counting and scrubbed crash reports for macOS apps. Secure Enclave keys, App Attest and DeviceCheck, three consent tiers. Swift package + multi-app Go service.

Verify Apple App Attest attestations and assertions in PHP: certificate chain, nonce, key id, counter. Stateless, no I/O.

Research tool demonstrating that Apple App Attest provides no jailbreak/tamper detection and no device-model binding: a headless attestation-and-assertion oracle daemon on a jailbroken iOS device, driving DCAppAttestService directly outside any UI flow.

Demo project showing how to implement Apple's DeviceCheck API for device-based banning with iOS (SwiftUI) and Node.js backend.

Sign your iOS app's requests with a Secure Enclave key. The Swift client for app-attest-gate.

Metering proxy for aaoracled: serves the same App Attest oracle HTTP contract, forwards every request to a real aaoracled, and records each one into SQLite for analyzing an app's devicecheckd traffic.

Research tool demonstrating that Apple App Attest provides no jailbreak/tamper detection and no device-model binding: a headless attestation-and-assertion oracle daemon on a jailbroken iOS device, driving DCAppAttestService directly outside any UI flow.

The parts of Apple App Attest everyone hand-rolls wrong: single-use challenges, atomic replay protection, environment pinning, body binding — plus StoreKit 2 entitlements and a server-metered free tier.