It works inside your apps.
Your AI app opens Notes, looks through a folder in Finder or drafts a reply in Mail through macOS Accessibility, using the same buttons and menus you do. Files and the terminal are there too.
Let your AI apps use your Mac.
A local server and menu bar app that lets Claude, ChatGPT, Codex and other MCP apps work in your Mac's apps, files, terminal and browser, with approvals you control.
Transcript
Your AI can think. It can't use your Mac. Connect the AI apps you already use. See what it's doing: the live island beside the notch shows the app in use, then a tick (optional, off by default). Visible, non-focus-stealing browser work: a Safari tab fills a form while you keep typing elsewhere. Hand off work and get a report back: a scheduled task runs every weekday and leaves a report (experimental). You stay in charge: approvals, Pause observation and Private mode. Let your AI apps use your Mac. Open source, MIT.
Works with Claude Desktop, Claude Code, ChatGPT, Codex, OpenCode and other MCP clients.
How it works
It browses where you can see it.
Visible, non-focus-stealing browser automation: forms, long pages and comment threads are handled in a tab while you keep using your Mac, and the tab is framed so you can see what it touches.
It hands off work and reports back.
Delegate a task to a Codex, Claude Code or OpenCode agent and read a report of what it did. Scheduled Tasks (experimental) run AI tasks and scripts on the schedule you set.
What people do with it
Ask ChatGPT from your phone
Talk to ChatGPT while you are away and let it work on the Mac at your desk. ChatGPT reaches your Mac through a public endpoint you turn on, such as a Cloudflare Tunnel.
Build with Claude Code
Claude Code runs your tests, reads the failing page in the browser and checks the app it just changed, without leaving the terminal.
Hand a job to Codex
Ask for a release checklist or a cleanup across the repo; a Codex agent works in its own folder and leaves a report with its steps and the files it changed.
Get a summary every weekday
A scheduled task runs at 08:30 and sends a notification when its report is ready. Tasks an AI app suggests wait for your approval. Experimental.
You stay in charge.
Rules the server enforces
- Permission profiles decide which kinds of tools may run. An allowed capability is not an approval prompt; Server Approval adds an Allow Once or Block answer for risky actions when you turn it on.
- Pause observation, Private mode and never-observe lists for apps and sites, in Settings › Privacy.
- The live island beside the notch is off by default.
- Updates install only signed stable release checkpoints.
What Mac MCP is not
- It is not a sandbox. It acts with your macOS user's permissions.
- Localhost is machine-local transport, not same-user isolation.
- What your AI app reads through Mac MCP is sent to that app's provider.
- Browser work is visible on screen, not hidden.
- The package is not notarized yet, so macOS asks you to choose Open Anyway the first time.
Install
Open this page on your Mac to install.
Package
Mac MCP 2.2.0 (stable-2.2.0-r1), Apple Silicon, macOS 14 or later, about 101 MB.
SHA-256, published with the GitHub release:
c0e6e3bed9e69adacb35b0f2644ed4b05e355375bf1d4bb256cc3ce75626aef3Check it after downloading:
shasum -a 256 ~/Downloads/Mac-MCP-2.2.0-stable-2.2.0-r1-arm64.pkgThe package is not notarized yet. If macOS stops it, open System Settings › Privacy & Security and choose Open Anyway.
Terminal
Installs the newest cryptographically verified stable release checkpoint, on Apple Silicon or Intel, macOS 13 or later.
curl -fsSL https://raw.githubusercontent.com/bulutarkan/mac-mcp/main/install.sh | bashFrom source
Clone the repository and run the server from your own checkout.
Then connect your AI app in one click from the menu bar app, and allow Accessibility and Screen Recording for Mac MCP when the first-run tour asks.