Mitori

Keep an eye on Apple ID store credit from your Mac menu bar.

Download · Changelog · Privacy · Security

Mitori is a native macOS menu bar app for checking store credit across multiple Apple IDs. It supports two-factor authentication, automatic refresh, and session recovery without making you sign in again from scratch.

Install

Homebrew

brew tap Zach677/star
brew install --cask mitori

The Homebrew cask handles Gatekeeper quarantine for the current ad hoc-signed community build.

Manual download

Download the latest DMG from GitHub Releases, then drag Mitori into /Applications.

Community builds are not notarized yet. If macOS blocks the first launch, open System Settings > Privacy & Security and choose Open Anyway. You can verify the downloaded files before opening them:

shasum -a 256 -c Mitori-<version>.dmg.sha256

Highlights

• Check multiple Apple ID store credit balances from the menu bar.
• Sign in with two-factor authentication and recover expired sessions.
• Refresh manually at any time, or in the background for accounts with a probe app. Background refresh never sends your password.
• Hide account names, email addresses, Apple IDs, and device IDs inside Mitori.
• Reveal complete account identifiers on hover and copy them with one click.
• Open Mitori automatically when you log in.

Add an account

You need an Apple ID email and password, and a two-factor authentication code when Apple asks for one. Mitori generates a device identifier automatically.

After sign-in, Mitori reads store credit from Apple's login response. When you refresh an account, Mitori reuses the session, or signs in again silently when needed.

You can optionally pick an app this Apple ID already owns (a probe app). Automatic refresh needs a probe app: it checks the balance with the stored session and never sends your password. Accounts without a probe app refresh only when you ask. If the session expires, automatic refresh pauses for that account until you refresh it manually. Add or change the probe app later from the account details window.

Privacy

Mitori has no backend. Account traffic goes directly to Apple, and your data stays on your Mac.

• Development-signed builds store credentials in the macOS Data Protection Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly.
• Ad hoc community builds use the local login Keychain because Apple restricts Data Protection Keychain access to provisioned apps. Stored items do not sync through iCloud.
• Account metadata is stored at ~/Library/Application Support/Mitori/accounts.json.
• Automatic refresh pauses while the screen is locked.

The Privacy Policy is also available under Settings > Privacy & Legal.

Build from source

You need macOS 14 or later, Xcode 26 or later, mise, xcbeautify, and Node.js.

brew install mise xcbeautify node

mise run build-macos
mise run run-macos
mise run test-macos
mise run test-community
mise run package-community

Builds are staged under .app-build/. Community DMGs and SHA-256 checksums are written to dist/.

To work in Xcode, open Mitori.xcodeproj.

Implementation notes

• Apple ID login, two-factor authentication, and session management live in Mitori/AppleStore/, ported from ApplePackage. All Apple Store requests use one URLSession transport that validates every redirect against an Apple host allowlist. Mitori has no third-party Swift package dependencies.
• Balance lookup sends a volumeStoreDownloadProduct request for an app owned by the account, then extracts store credit from Apple's response.
• A 60-second timer checks whether each account with a probe app is due for refresh. The default interval is one hour, the minimum is 15 minutes, and failed requests back off before retrying.
• Community releases use ad hoc signing with Hardened Runtime and include both arm64 and x86_64 slices. The Intel build is verified but has not been tested on Intel hardware.

Special notes

• Mitori is under early development and relies on Apple Store services that may change without notice.
• Mitori is not affiliated with or endorsed by Apple Inc. Use it only with accounts you are authorized to access and follow Apple's terms.
• Community releases are ad hoc signed and not notarized. Developer ID signing and notarization are planned.

See CHANGELOG.md for release notes.

Acknowledgements

Mitori's Apple Store protocol code is ported from Zach677/ApplePackage, a fork of Lakr233/ApplePackage, which adapts ipatool. Thanks to Lakr Aream for the original project and the Apple Store protocol work Mitori builds on.

License

Mitori is available under the MIT License. Third-party license terms are bundled with the app and can be regenerated with mise run scan-license. Notices for ported code live in Resources/AdditionalLicenses/.

---

Copyright © 2026 Zach. All Rights Reserved.