MCP Macos runs on your own machine — the client starts it, so there is no endpoint to ping. 33 installs a week from npm. Last commit 9 Nov 2026.
Observe & operate a Mac — files, processes, apps, shell, AppleScript, GUI — safe by default.
We read the source, 6 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
child = spawn(command, args, { cwd: opts.cwd, env: process.env });
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-macos -- npx -y @dockndevai/mcp-macos
{
"mcpServers": {
"mcp-macos": {
"command": "npx",
"args": [
"-y",
"@dockndevai/mcp-macos"
]
}
}
}
[mcp_servers.mcp-macos]
command = "npx"
args = ["-y", "@dockndevai/mcp-macos"]
{
"mcpServers": {
"mcp-macos": {
"command": "npx",
"args": [
"-y",
"@dockndevai/mcp-macos"
]
}
}
}
{
"servers": {
"mcp-macos": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@dockndevai/mcp-macos"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
MACOS_MODE (Access mode: read-only | read-write | admin. Starts read-only; writes need read-write), MACOS_ALLOW_EXEC (Set true to allow run_command / run_applescript / kill_process (admin mode)), MACOS_ALLOW_DELETE (Set true to allow delete_path (moves to Trash; admin mode)), MACOS_ALLOW_INPUT (Set true to allow GUI input (type/key/click; admin mode). Needs Accessibility permission), MACOS_PATH_ALLOWLIST (Comma-separated path roots the agent may touch (empty = anywhere; protected paths still apply)).
Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.
Operate a k3s / Kubernetes cluster from your AI agent — safe-by-default MCP server.
MCP server giving AI agents safe access to filesystem, databases, processes, and APIs.
Drive a PC over MCP: shell, files, processes, system stats, screenshots, mouse and keyboard.
Filesystem MCP server: files, previews, search, processes, OCR, archives, safe delete, web fetch.
Kubernetes monitoring & ops for AI agents — safe-by-default access modes and guards.
Read and act on Apple Maps — favourites, Guides and recents, writes off by default
MCP server for Apple Notes integration using AppleScript with full CRUD operations
Answers built from our own checks of this server.