ShrubHub · iOS signing

Signing is easy with ShrubSign.

Sign IPA files using your own certificate, import links from ShrubLibrary, and get an installation link. Built for iPhone and iPad.

Start signing →Developer documentation

Sign an IPA

01 / Setup

Select an IPA file or import its download URL.

IPA fileUploaded straight from your browser to the signing provider, not through Cloudflare Functions.

App name (optional)

Bundle ID (optional)

Signing certificate

02 / Certificate

P12 certificate

Provisioning profile

P12 password

Tweak injection

03 / Optional

Inject .dylib filesOptional local Mach-O injection before signing. Works only when the app's executable has enough load-command padding and the dylib is compatible; this mode uses considerably more RAM.

I understand my IPA, signing certificate, provisioning profile and password are sent directly to an independent signing provider. I trust that provider with these files.

Signing status

Checking

Ready to sign. Fill in the fields to get started.

Signing may take several minutes. Closing this tab during upload interrupts the upload; completed task IDs can be reopened with ?task=ID.

From ShrubLibrary?

Open app download URLs here without manually copying them.

A ShrubLibrary button can point to

Browse ShrubLibrary ↗

How it works

Your browser sends the IPA and certificate straight to the provider. Cloudflare Pages Functions retrieve task status and a small install manifest. Files aren't routed through Pages Functions.

Large-file support, CORS and signing availability depend on the provider. A provider's permanent installation URL is not guaranteed to remain valid forever.

ShrubSign Web · API documentation

v1 · Public integration

This documents ShrubSign Web integration and its own Cloudflare endpoints. It is not IPASignX API documentation. File uploads intentionally do not pass through the ShrubSign server.

Open an IPA from a URL

Use an HTTPS deep link. ShrubSign automatically fills the IPA URL and switches to URL mode. name, bundle, and from are optional.

GET /?ipa=...&name=...&bundle=...&from=shrublibrary

ShrubLibrary button example

Add a button that passes an app's real IPA download URL into ShrubSign Web. Use your own ShrubLibrary app download variable.

JavaScript

Check signing status

Queries an existing signing task using the Cloudflare Function. Returns normalized JSON with status, message, task ID and an optional download URL.

GET /api/status/:id

Direct installation

When the provider reports success, ShrubSign exposes a manifest URL and creates an iOS itms-services installation link.

GET /api/manifest/:id.plist

Provider configuration

This endpoint returns the public direct-upload destination and readiness state. The endpoint is configurable using Cloudflare environment variables.

GET /api/config

fetch('/api/config').then(r => r.json())

Supported URL parameters

ipa or url — direct IPA URL. name — display name. bundle — bundle ID. from=shrublibrary — show a return link. task — reopen task tracking.

HTTPS web links work without registering a custom iOS app scheme.