Kukuroo Open-Sources Self-Hosted iOS Push Notifications via Cloudflare
A new tool leverages Apple's Declarative Web Push to bypass the App Store and paid developer accounts.
Developer saiday has open-sourced Kukuroo, a tool that enables users to deploy their own push notification endpoints using a single Cloudflare Worker and a KV namespace. The system allows developers to send lock-screen alerts to iOS devices without the need for a native application or a paid App Store developer account.
Deployed via a single command, Kukuroo integrates with Safari on iOS 18.4 and later. To function, the associated web page must be added to the device's Home Screen. The infrastructure is built exclusively for Cloudflare Workers, utilizing a KV namespace for storage. For those using Cloudflare's free plan, the system supports up to 100,000 requests per day and can send notifications to 50 devices per transmission.
The Shift to Declarative Push
Historically, delivering push notifications to iOS was a gated process. Developers were required to build a native app and maintain a membership in the Apple Developer Program, which costs $99 per year. While Web Push standards existed for other platforms, Apple's implementation remained restrictive until the recent introduction of Declarative Web Push in WebKit.
Unlike traditional web push, which relies on JavaScript, Declarative Web Push is handled natively by WebKit. According to saiday, this extension of the standard "finally makes the whole thing make sense," as it improves both reliability and privacy by removing the dependency on client-side scripts to trigger the alert.
Democratizing Mobile Alerts
Kukuroo effectively democratizes iOS notifications for power users and independent developers. By removing middle-man services and expensive entry fees, any HTTP-capable source—including shell scripts, CI pipelines, or cron jobs—can now trigger a mobile alert. As the Kukuroo documentation puts it, "Anything that can make an HTTP call can ring your phone."
This shift represents a broader move toward open web standards for mobile communication. It allows for lightweight, serverless notification systems that do not require the overhead of a full app submission and review process, granting developers direct control over their notification pipeline.
Ecosystem Limitations
Despite the flexibility, the tool currently remains limited to the WebKit ecosystem and requires the latest iOS updates to operate. While the developer claimed on Hacker News that Declarative Web Push messages are end-to-end encrypted—meaning Apple cannot see the content—this specific claim has not been independently verified through official WebKit or Apple documentation. Users should monitor official Apple developer releases to confirm the full security specifications of the declarative standard.