MCP Mac Control runs on your own machine — the client starts it, so there is no endpoint to ping. 31 installs a week from npm. Last commit 9 Nov 2026.
Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.
We read the source, 6 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
child = spawn(command, args, { cwd: opts.cwd, env: process.env });
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-mac-control -- npx -y @dockndevai/mcp-mac-control
{
"mcpServers": {
"mcp-mac-control": {
"command": "npx",
"args": [
"-y",
"@dockndevai/mcp-mac-control"
]
}
}
}
[mcp_servers.mcp-mac-control]
command = "npx"
args = ["-y", "@dockndevai/mcp-mac-control"]
{
"mcpServers": {
"mcp-mac-control": {
"command": "npx",
"args": [
"-y",
"@dockndevai/mcp-mac-control"
]
}
}
}
{
"servers": {
"mcp-mac-control": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@dockndevai/mcp-mac-control"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
MACCTL_SAFE_MODE (Set true to invert to safe-by-default: read-only, all powers gated, confirmations on. Default false (full control)), MACCTL_MODE (Access mode: read-only | read-write | admin. Defaults to admin (or read-only in safe mode)), MACCTL_CONFIRM (Set true to require human approval (via MCP elicitation) on destructive ops. Default off in full control), MACCTL_PATH_ALLOWLIST (Comma-separated path roots the agent may touch (empty = anywhere)), MACCTL_PROTECTED_PATHS (Comma-separated path roots that may be read but never modified/deleted (empty by default in full control)).
Drive a local Blender headlessly: inspect, convert, render and script 3D files.
MCP server that drives the user's real macOS Chrome via AppleScript. 32 tools.
Focus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.
Manage files, folders, permissions, and collaborative content in Google Drive
Drive a PC over MCP: shell, files, processes, system stats, screenshots, mouse and keyboard.
Notes, files, GitHub, and Drive through one MCP connection.
Notes, files, GitHub, and Drive through one MCP connection.
Notes, files, GitHub, and Drive through one MCP connection.
Answers built from our own checks of this server.