Loupe
Documentation

Flow

Install Loupe.

Loupe ships as a notarized macOS application — Developer ID signed, distributed outside the Mac App Store. From buying (or starting a trial) to first case is typically under three minutes.

1

Buy a license or start a trial

Two paths land you in the same place — an email with a download link.

  • Pricing → pick a tier (Single $79, Team $149, Site $499) → Paddle checkout
  • Start free trial → sign in with Google, Microsoft, Apple, or email magic link → 14-day full-feature trial

Either way, you'll receive an email within a minute containing the DMG download link and a separate activation link. Both are tied to the email address you signed in with.

2

Download and open the DMG

Click the download link in the email. The DMG (~25 MB) downloads to ~/Downloads. Double-click Loupe.dmg to mount it. A standard install window opens with Loupe.app on the left and an Applications shortcut on the right.

Drag Loupe.app onto the Applications shortcut. Wait for the copy to finish, then eject the DMG (right-click → Eject, or drag it to the trash).

3

First-run Gatekeeper

Loupe is Developer-ID signed and notarized by Apple — the strongest signing tier outside the Mac App Store. The first time you launch it, macOS will still want a deliberate acknowledgment because it didn't come from the App Store.

  • Open Finder → Applications → right-click Loupe.app Open
  • In the dialog that appears, click Open again

Loupe launches into the unactivated state — a clean window with a single “Activate Loupe” call to action. No features are gated yet; you just need to hand it the activation envelope from your email.

After this first right-click open, every subsequent launch works from a normal double-click — Gatekeeper remembers your decision per-app.

4

(Optional) Verify the signature yourself

Auditors and security-review teams: confirm the bundle came from us before launching it. From a terminal:

# Confirm Apple Developer Team 5UF3Q334K6 + notarization
codesign -dv --verbose=4 /Applications/Loupe.app

# Confirm Gatekeeper acceptance
spctl -a -t execute -vvv /Applications/Loupe.app

# Confirm no network entitlement (defense in depth)
codesign -d --entitlements - /Applications/Loupe.app | grep -c network

The third command should print 0 — Loupe has no network entitlement, so the OS itself prevents the app from making network calls regardless of code.

5

Click the activation link

Back in your inbox, find the email with “Activate Loupe” in the subject. The activation link looks like:

loupe://activate?envelope=eyJ2IjoxLCJ0aWVyIjoic2luZ2xlIi…

Click it. macOS hands the URL to Loupe.app via the registered loupe:// scheme. Loupe verifies the Ed25519 signature against the public key embedded in the build, checks the issuance window, and transitions to the activated state.

Curious about the signature scheme? See the activation envelope wire format.

6

Drop in your first log

Loupe is now ready. Drag any log file onto the window — syslog, nginx access, JSONL, an .eml thread, or a .pcap capture if you have tshark installed. Loupe creates a case automatically and starts ingesting.

For a guided first investigation, walk through the database outage flow — the canonical four-source case Loupe was built for.

Installed.

Updates are manual in v1 — when a new version ships, you'll receive an email with a fresh DMG link. Drag the new Loupe.app over the old one in /Applications; existing cases carry forward unchanged. An in-app updater (Sparkle) is on the v1.x roadmap.