Mac MCP
A local MCP server for Mac: Claude, Codex and ChatGPT work in apps, files, terminal and browser under your permissions
- 97 ★ on the repository
- Last commit
Broad access
Why this level
- Acts with your macOS user's rights: drives apps, files, the terminal and the browser and sees open tabs
- What the AI app reads goes to its provider, and scheduled tasks run without you
Install
- Works in
Manual install
curl -fsSL https://raw.githubusercontent.com/bulutarkan/mac-mcp/main/install.sh | bashInstaller for macOS 13 and newer. For Apple Silicon and macOS 14 a .pkg is available in the latest release.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Acts with your macOS user's rights: drives apps, files, the terminal and the browser and sees open tabs
- What the AI app reads goes to its provider, and scheduled tasks run without you
This is third-party code. Review the repository files before installing.
What it does
Mac MCP is a local server and macOS menu bar app that lets AI apps (Claude, ChatGPT, Codex, OpenCode and other MCP clients) act on your Mac. Apps are driven through macOS Accessibility with the same buttons and menus a person uses: Notes, Finder, Mail. Files and the terminal are available. Browser automation in Safari and Chrome runs in a background tab that a frame highlights while you keep working. A task can be delegated to another agent (Codex, Claude Code, OpenCode and seven other CLIs) with a report back. Chosen folders are indexed locally, and the AI app answers from contracts, invoices and notes with the file and page. Scheduled Tasks run scripts on their own, and Recipes save what the AI did once and replay it with one click from Settings, the Shortcuts app or Siri. Version 2.3.1 added Mac MCP Chat for working with agents in a project folder. Rights are controlled by permission profiles, and optional Server Approval asks before dangerous actions. Install with the `.pkg` from the release (Apple Silicon, macOS 14 or newer) or the installer for macOS 13 or newer. Connect a client with `mac-mcp connect --client claude-desktop` (or `claude-code`, `codex`, `opencode`).
Who it is for. Mac users who already work with Claude, Codex or ChatGPT and want the AI to act in the computer's apps, files and browser with chat as the remote control.
Good fit when
- A folder in Finder has to be sorted, Notes opened and a mail reply drafted
- Contracts and invoices sit in several folders and answers with file and page references are needed
- An AI job should be saved as a recipe and run from Siri or on a schedule
- Tests and edits should go to Codex or Claude Code on the same Mac with a report to read afterwards
Not a fit when
- You need isolation: Mac MCP has no sandbox and acts with your macOS user's permissions
- You work on Windows or Linux: the tool targets macOS 13 and newer
- The computer holds third-party confidential data that cannot go to an AI provider: what the AI app reads is sent to its provider
Example request
Open the Contracts folder in Finder, find the October invoices and draft a letter to the accountant in Mail without sending itMCP
- Transport
- stdio, http
- Authentication
- key is optional
Environment variables
MAC_MCP_API_KEYsecret- Key for HTTP client connections (Codex, OpenCode, Claude Code over the network)
MAC_MCP_CLI_SKILLS_DIRS- Colon-separated list of global skills directories to auto-discover
Limitations
- Mac MCP has no sandbox: it acts with your macOS user's permissions, and the local address is machine-local transport that does not isolate processes of the same user.
- Whatever the AI app reads is sent to that app's provider.
- The `.pkg` targets Apple Silicon and macOS 14 or newer and is not notarized yet, so the first open needs Open Anyway in privacy settings. The installer works on macOS 13 and newer.
- ChatGPT needs a public HTTPS address (for example a Cloudflare Tunnel), and Local only mode works only for apps on this Mac.
How to disable. Quit the menu bar app and disconnect the client in its settings or remove the `mac-mcp` block from the client configuration. Update and removal steps are in `docs/install.md`.
FAQ
How do I connect Mac MCP to Claude Code or Codex?
Run `mac-mcp connect --client claude-code` (or `codex`, `opencode`, `claude-desktop`). It adds Mac MCP as a command-based server that runs `mac-mcp stdio`, leaving no key or address in the config. `mac-mcp clients` shows which clients are on the Mac.
How does it work with ChatGPT?
ChatGPT connects from OpenAI's servers, so a public HTTPS address such as a Cloudflare Tunnel or ngrok is needed. `mac-mcp connect-config --client chatgpt` prints the config, and in Local only mode ChatGPT cannot be connected.
How can I limit what the AI does?
Permission profiles decide which tools are available, and optional Server Approval asks before dangerous actions. You can pause observation, turn on private mode or keep apps and sites out of the AI's reach.
Which agents can Mac MCP launch?
Tasks can be handed to Codex, Claude Code, OpenCode and seven other CLIs, and Mac MCP Chat works with Claude, Codex, OpenCode, GitHub Copilot, Antigravity, Kilo Code, Kimi Code, Goose and Cline.
Which macOS versions are supported?
The `.pkg` targets Apple Silicon and macOS 14 or newer, and the installer (`install.sh` or `npx @bulutarkan/mac-mcp install`) works on macOS 13 and newer on Apple Silicon and Intel.
Discussion
No questions or reviews yet.
Related
MCP serversA local MCP server for Mac and Windows that lets an agent work with mail, messengers, calendars and files.
An MCP server for macOS: an agent reads, searches and sends messages in the Messages app on your Mac
Macuse's official plugin and MCP server give an agent Calendar, Mail, Notes and Messages on a Mac, plus control of any app
An MCP server and Mac app that keeps one local index of repos, agent sessions and tickets, with semantic search and work threads
An MCP server that lets an agent work on your computer: terminal and long-running processes, file search and edits, Excel, PDF and DOCX
An MCP server for Apple Mail on macOS: search, reading, drafts, rules and attachments, with confirmation for dangerous steps.
README in short
The README names five strengths: working inside apps through Accessibility, visible browser automation, delegating tasks to other agents, answers from documents and automating repeat work. Quick install, version 2.3.1 news (Mac MCP Chat), a documentation map, Agent Skills sync from CLI agents' directories and security and development sections follow.