MCP Macos runs on your own machine — the client starts it, so there is no endpoint to ping. 30 installs a week from npm. Last commit 18 Sep 2026.
Observe & operate a Mac — files, processes, apps, shell, AppleScript, GUI — safe by default.
We read the source, 4 h ago · rules 3dff92dd89df
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
child = spawn(command, args, { cwd: opts.cwd, env: process.env });
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-macos -- npx -y @dockndevai/mcp-macos
{
"mcpServers": {
"mcp-macos": {
"args": [
"-y",
"@dockndevai/mcp-macos"
],
"command": "npx"
}
}
}
[mcp_servers.mcp-macos]
command = "npx"
args = ["-y", "@dockndevai/mcp-macos"]
{
"mcpServers": {
"mcp-macos": {
"args": [
"-y",
"@dockndevai/mcp-macos"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"mcp-macos": {
"args": [
"-y",
"@dockndevai/mcp-macos"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
MACOS_MODE (Access mode: read-only | read-write | admin. Starts read-only; writes need read-write.), MACOS_ALLOW_EXEC (Set true to allow run_command / run_applescript / kill_process (admin mode).), MACOS_ALLOW_DELETE (Set true to allow delete_path (moves to Trash; admin mode).), MACOS_ALLOW_INPUT (Set true to allow GUI input (type/key/click; admin mode). Needs Accessibility permission.), MACOS_PATH_ALLOWLIST (Comma-separated path roots the agent may touch (empty = anywhere; protected paths still apply).).
The author declared them in the registry entry; get the values from the project itself.
Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.
Operate a k3s / Kubernetes cluster from your AI agent — safe-by-default MCP server.
Filesystem MCP server: files, processes, sessions, async search, OCR, archives, safe delete.
MCP server giving AI agents safe access to filesystem, databases, processes, and APIs.
Kubernetes monitoring & ops for AI agents — safe-by-default access modes and guards.
Read and act on Apple Maps — favourites, Guides and recents, writes off by default
MCP server for Apple Notes integration using AppleScript with full CRUD operations
MCP server for macOS Mail.app — gives Claude native email access via AppleScript
Answers built from our own checks of this server.