Check if an app passes Gatekeeper on Mac
See whether an app is signed and where its signature comes from.
Replace the path with the app you want to check and run the command. 'accepted' means Gatekeeper approves it; the output also shows the Developer ID and signature source.
01Command
Command
$ spctl -a -vv /Applications/Something.app02What it does
Gatekeeper decides whether unsigned or unknown apps may run. spctl -a runs the same assessment from the command line; -vv adds detail such as the signing certificate and whether the app came from the App Store or a Developer ID. Useful for diagnosing 'app is damaged / cannot be opened' warnings before overriding them.
03Risk
!Warning: spctl only reports policy status — an 'accepted' verdict is not a guarantee that the software is safe.
04Undo
✓No undo needed — this command does not change persistent state.
05Sources
- spctl — system policy security assessmentEvidence: spctl -a assesses an application against Gatekeeper policy; -vv prints the assessment source.
Last verified: 2025-11-09 · Category: Security & Privacy