AltStore and SideStore Sources: How to Add One, Plus Trusted URLs
AltStore and SideStore do not have one big app catalog. Apps come from sources: links that developers publish so their apps show up inside the store. This guide explains what a source is, how to add one in AltStore and SideStore, and lists the source URLs that AltStore and SideStore themselves recommend in their own documentation. Last checked: October 27, 2026, against AltStore’s Trusted Sources, Sources and Make a Source pages, and SideStore’s App Sources, URL Schema and FAQ pages.
The Risks First
- A source decides which apps you see and which updates you get. Whoever runs it can change what an app download contains, so adding a source means trusting its owner.
- Only AltStore’s Trusted Sources are reviewed by AltStore. Its docs say they “have been reviewed to make sure they meet our safety standards”. Any other source is not checked by anyone but you.
- Lists of “hundreds of sources” on random websites and GitHub pages mix official sources with re-uploads of paid apps. This page lists only URLs from AltStore’s and SideStore’s own docs.
- Apps from sources are still signed with your own Apple ID, so the free-account limits apply: 3 apps at a time and a 7-day signature (see the 3-app limit and apps that expire after 7 days).
What a Source Actually Is
AltStore’s developer docs describe a source as “just a self-hosted JSON file containing basic metadata about your apps”: the app name, icon, versions and download links. When the developer adds a new version to that file, AltStore’s docs say it “will automatically detect that an app update is available and notify users”. SideStore says it is “fully compatible with AltStore Sources (or AltSources)”, so the same source URL works in both.
A file called sources.list is something different: that is the format jailbreak package managers such as Cydia and Sileo use for repositories of tweaks. It does not work in AltStore or SideStore. For Scarlet’s own repository format, see our list of Scarlet iOS repos.
Sources Recommended in the Official Docs
These are the only URLs on this page. Each one is copied from the AltStore or SideStore documentation as it read on October 27, 2026.
| Source | URL (as listed) | Apps | Listed by |
|---|---|---|---|
| Official AltStore Source | https://apps.altstore.io |
AltStore’s own apps | SideStore App Sources |
| SideStore Community Source | https://community-apps.sidestore.io/sidecommunity.json |
Community apps | SideStore FAQ |
| LiveContainer | https://raw.githubusercontent.com/LiveContainer/LiveContainer/refs/heads/main/apps.json |
LiveContainer | SideStore App Sources |
| OatmealDome’s AltStore Source | https://altstore.oatmealdome.me |
DolphiniOS, DolphiniOS (beta) | AltStore Trusted Sources, SideStore App Sources |
| UTM Repository | https://alt.getutm.app |
UTM | AltStore Trusted Sources |
| Flyinghead | https://flyinghead.github.io/flycast-builds/altstore.json |
Flycast | AltStore Trusted Sources |
| Provenance | https://provenance-emu.com/apps.json |
Provenance | AltStore Trusted Sources |
| PojavLauncher | https://alt.crystall1ne.dev |
PojavLauncher | AltStore Trusted Sources |
A note on the AltStore page: for Provenance and PojavLauncher, the text of the link shows the URLs above, but the link itself points to Provenance’s website. Copy the URL text rather than tapping the link. If a URL stops working, check the developer’s own site or the docs again, because sources move.
Several of these apps have their own guides here: DolphiniOS, UTM SE and LiveContainer. Note that some of these apps need JIT, which a free sideloading setup does not always provide.
How to Add a Source in SideStore
SideStore is a fork of AltStore and keeps its Sources tab, so adding a source works the way AltStore’s docs describe below: open SideStore with LocalDevVPN connected, go to Sources, tap + and paste the URL. The source’s apps then appear in Browse. Each app you install counts toward the 3-app limit.
SideStore’s URL Schema page also documents a one-tap link: sidestore://source?url=[source url]. A developer can put this on their website so that tapping it opens SideStore and adds the source. SideStore warns that if you tap such a link “without SideStore already installed, it will crash”. One more detail from SideStore’s App Sources page: a source that carries a marketplaceID field looks like a notarized AltStore PAL source, and SideStore will then “prevent your source being added”.
New to SideStore? Start with our SideStore installation guide.
How to Add a Source in AltStore
AltStore’s Sources page describes the steps for AltStore PAL: “go to the Sources tab. From there you can add a source by tapping the ‘+’ button and enter the source’s URL.” The source’s apps then “appear in the Browse tab”. AltStore’s Trusted Sources are also “available to add easily from within AltStore”, without typing a URL.
Two things differ between the versions. AltStore PAL (EU, Japan and Brazil) only installs notarized apps, so a normal AltSource made for AltStore Classic will not work there; AltStore’s own comparison lists PAL as “installs notarized apps” and Classic as “installs any .ipa file”. See our AltStore PAL guide for the PAL side.
How to Judge a Source Not on These Lists
- Who runs it? The best source is the one on the app developer’s own website or GitHub. A source run by someone else is a re-upload.
- What does it host? A source offering paid App Store apps for free is distributing modified copies.
- Is it active? Open the JSON URL in a browser: it shows the app versions and their dates. A source with years-old versions will not get you updates.
- Check the files. Before installing anything from a new source, see how to scan IPA files for malware.
- Remove what you do not use. A source you no longer need can still offer updates; delete it from the Sources tab.
Sources and Updates
Sources are also how AltStore and SideStore find updates. When the developer publishes a new version in the source, the store offers the update. AltStore’s docs add that it “will only show that an app update is available if it’s compatible with the user’s OS version”. Install updates over the existing app so it keeps its data; our guide on updating sideloaded apps covers the rest.
What About Scarlet?
Scarlet installs apps with a shared enterprise certificate rather than your Apple ID, and has its own repositories, which you add inside Scarlet. Its risks are different: no 3-app limit, but Apple can revoke the certificate at any time. Scarlet is confirmed on iOS 14 through iOS 26; iOS 27 support is reported by third parties but not officially confirmed. For Scarlet repositories, see our IPA libraries and repositories guide.
FAQ
Can I use an AltStore source in SideStore?
Yes. SideStore says it is fully compatible with AltStore Sources. The exception is a notarized AltStore PAL source, which SideStore will not add.
Can I make my own source?
Yes. AltStore’s Make a Source page lists the required JSON keys and offers example files for AltStore PAL and AltStore Classic. You host the file yourself and share its URL. Our guide to making your own AltStore or SideStore source walks through the keys and the update rules.
Why does a source show no apps?
The URL may be wrong or moved, the source may be made for the other AltStore version (PAL vs Classic), or the apps may not support your iOS version.
Is a source the same as a repo?
People use the words loosely. In AltStore and SideStore, a source is a JSON file. A Cydia or Sileo repo is a different format for jailbroken devices.