How do I install Apple Files?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Apple Files need an API key?

The publisher lists these environment variables: APPLE_FILES_MCP_SAFETY_MODE, APPLE_FILES_MCP_ALLOWED_ROOTS.

What transport does Apple Files use?

Apple Files runs locally over stdio.

When was Apple Files last checked?

Last checked 2026-11-11. Inspect and manage local files and folders inside allowed roots on macOS.

Apple Files MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

uvx apple-files-mcp==1.1.6

Credentials from the publisher

APPLE_FILES_MCP_SAFETY_MODE — Safety mode for file operations: safe_readonly, safe_manage, or full_access.
APPLE_FILES_MCP_ALLOWED_ROOTS — Comma-separated directories the server may access. Defaults to Desktop, Documents, Downloads, and iCloud Drive.

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1APPLE_FILES_MCP_SAFETY_MODE=<value> APPLE_FILES_MCP_ALLOWED_ROOTS=<value> claude mcp add io.github.jonathanrreed-apple-files-mcp -- uvx apple-files-mcp==1.1.6

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.jonathanrreed-apple-files-mcp": {4      "command": "uvx",5      "args": [6        "apple-files-mcp==1.1.6"7      ],8      "env": {9        "APPLE_FILES_MCP_SAFETY_MODE": "<value>",10        "APPLE_FILES_MCP_ALLOWED_ROOTS": "<value>"11      }12    }13  }14}

claude_desktop_config.json

Local · pypiPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

Apple-MCPs

MCP servers that let an AI client use Apple apps and macOS tools. Create reminders, send messages, check calendars, search mail, manage files, and get directions.

The servers run on your Mac. Your MCP client may send returned data to its model provider, and Apple apps may sync through iCloud or another account. Local execution does not mean the data stays local.

Requires Python 3.11+ and macOS. Uses MCP specification 2026-07-28 and Python SDK 2.x, with support for older client protocol revisions. MIT license.

Install

Install uv, then register the unified server with your client.

Claude Code:

claude mcp add --transport stdio --scope project apple-tools -- uvx apple-tools-mcp

Codex:

codex mcp add apple-tools -- uvx apple-tools-mcp

Other stdio clients:

{
  "mcpServers": {
    "apple-tools": {
      "command": "uvx",
      "args": ["apple-tools-mcp"]
    }
  }
}

Run uvx apple-tools-mcp to start the server directly. Standalone servers use the same approach, such as uvx apple-mcp-mail or uvx apple-calendar-mcp.

Restart your client after installing or upgrading. Call search_tools with calendar health to check discovery without reading app data.

For Claude Desktop, download a server's .mcpb bundle from Releases and double-click it.

Set app-specific safety modes and directories in your client's env settings. An explicitly invalid or blank safety setting selects safe_readonly; unset settings retain each domain's documented default. The configuration guide lists defaults and options. Mail attachments are disabled until you set APPLE_MAIL_MCP_ALLOWED_ATTACHMENT_ROOT to a dedicated directory. Files tools only access APPLE_FILES_MCP_ALLOWED_ROOTS; macOS may impose further restrictions.

Choose a server

Start with Apple-Tools-MCP. It combines all ten apps and tools below, plus saved defaults, contact routing, Mail thread helpers, undo, briefings, and cross-app workflows.

Choose a standalone server to expose fewer apps to your client:

Server	macOS access	Health tool	Permission help
Mail	Automation access to Mail	`mail_health`	`mail_permission_guide`, `mail_recheck_permissions`
Calendar	Calendar access	`calendar_health`	`calendar_permission_guide`, `calendar_recheck_permissions`
Reminders	Reminders access	`reminders_health`	`reminders_permission_guide`, `reminders_recheck_permissions`
Messages	Automation; Full Disk Access for history	`messages_health`	`messages_permission_guide`, `messages_recheck_permissions`
Contacts	Contacts access	`contacts_health`	`contacts_permission_guide`, `contacts_recheck_permissions`
Notes	Automation access to Notes	`notes_health`	`notes_permission_guide`, `notes_recheck_permissions`
Shortcuts	Usually no separate prompt	`shortcuts_health`	`shortcuts_permission_guide`, `shortcuts_refresh_state`
Files

The unified server uses apple_health, apple_permission_guide, and apple_recheck_permissions. You must approve permissions yourself in the macOS prompt or System Settings.

Find and use tools

MCP tools/list returns each tool's schemas and read or write annotations. Use search_tools to search names, descriptions, and aliases; use get_tool_info for one tool's schema and examples.

Resolve recipients through Contacts before sending, unless you have the exact address. For Mail conversations, use mail_get_thread, mail_reply_latest_in_thread, or mail_archive_thread. Pass an exact sender email in from_account when the sending identity matters.

Mail search requires a query: a sender, subject fragment, or *. Reminders due_date requires a timezone offset, such as yyyy-MM-ddTHH:mm:ss-08:00. Omit service_name when sending iMessages.

The unified server also provides apple_generate_daily_briefing, apple_generate_weekly_briefing, and apple_triage_communications_task. Clients without prompt support can use apple_list_prompts, apple_get_prompt, and their per-server equivalents.

For calls from Python, use the metadata in generated/tool_catalogs/ and wrappers in generated/tool_wrappers/python/. See code-mode.md.

Transport and stored state

stdio is the default. To use Streamable HTTP, set APPLE_<DOMAIN>_MCP_TRANSPORT=streamable-http and the matching _HOST and _PORT variables.

HTTP must bind to 127.0.0.1, ::1, or localhost. The servers have no remote authentication and reject network and wildcard binds. Do not expose them through a tunnel or public proxy.

Apple-Tools-MCP stores defaults in ~/.apple-tools-mcp/preferences.json, configurable through APPLE_AGENT_MCP_STATE_FILE. It stores recent actions in ~/.apple-tools-mcp/actions.json for audit and undo.

Develop

git clone https://github.com/JonathanRReed/Apple-MCPs.git
cd Apple-MCPs
uv sync --all-packages

The uv workspace installs every server into .venv/bin. Each server folder also has a start.sh for clients; it uses uv when available and otherwise creates a virtual environment. Root pyproject.toml defines workspace members, and uv.lock pins dependencies.

Path	Contents
`Apple-Tools-MCP/`	Unified server; module `apple_agent_mcp`, environment prefix `APPLE_AGENT_MCP_*`
`Apple<Domain>-MCP/`	Standalone servers; Calendar uses `Apple-Calendar-MCP`
`AppleMCPCommon/`	Shared discovery and search, published as `apple-mcp-common`
`generated/`	Tool catalogs and Python wrappers
`scripts/`	Installation, checks, generation, and bundle builds
`docs/`	Project and launch documentation

Run smoke checks:

bash scripts/inspector_smoke.sh
uv run python scripts/protocol_smoke.py

For the official conformance suite, start the server in a separate terminal:

APPLE_AGENT_MCP_TRANSPORT=streamable-http \
APPLE_AGENT_MCP_PORT=8765 \
APPLE_AGENT_MCP_CONFORMANCE_MODE=1 \
./Apple-Tools-MCP/start.sh

npx -y @modelcontextprotocol/[email protected] server --url http://127.0.0.1:8765/mcp --requirements 2026-07-28

Conformance mode registers test fixtures. Use it only for protocol validation. CI runs lint, macOS and Linux tests, generated-file checks, Inspector smoke checks, and conformance tests.

Documentation

Contributing · Security · Troubleshooting · MCP compatibility · Publishing · Changelog · Trademark notice · Launch docs