mcpbeat Sign in

Apple Messages MCP Server

local only

Apple Messages runs on your own machine — the client starts it, so there is no endpoint to ping. 319 installs a week from npm. Last commit 22 Oct 2026.

Search and read Apple Messages — chats and decoded text, sending off by default

Installs per day peak 249 · avg 41 · +239% w/w
a month agotoday
319
Installs / week
npm · @mgcrea/mcp-apple-messages
5
Stars
2 open issues
22 Oct 2026
Last commit
31 releases in 90 days
MIT
License
TypeScript

What the code does

We read the source, 2 h ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    return execSync(cmd, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
Dumps the whole environment apps/apple/tsdown.servers.config.ts:76
    __GIT_COMMIT__: JSON.stringify(process.env.GIT_COMMIT || tryGit("git rev-parse --short HEAD")),
In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

Builds a database query by concatenation .github/workflows/ci.yml:873
      - name: Sign the update 🔏
        env:
          SPARKLE_ED_PRIVATE_KEY: ${{ secrets.SPARKLE_ED_PRIVATE_KEY }}

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add mcp-apple-messages -- npx -y @mgcrea/mcp-apple-messages
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp-apple-messages": {
      "command": "npx",
      "args": [
        "-y",
        "@mgcrea/mcp-apple-messages"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp-apple-messages]
command = "npx"
args = ["-y", "@mgcrea/mcp-apple-messages"]
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-apple-messages": {
      "command": "npx",
      "args": [
        "-y",
        "@mgcrea/mcp-apple-messages"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-apple-messages": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@mgcrea/mcp-apple-messages"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: APPLE_MESSAGES_ALLOW_WRITES (Register the mutating tools. Off by default, and the gate decides whether the write tools exist at all rather than merely refusing — an agent with writes off cannot see them), APPLE_MESSAGES_ALLOW_CODES (Register apple_messages_find_codes, which reads one-time codes out of recent messages. Its own gate rather than allowWrites: it is a read, and the one read most worth an explicit decision), APPLE_MESSAGES_ALLOW_FILE_SEND (Let apple_messages_send_message attach a local file. Off by default even with writes on, because a path argument is a way to send anything the server can read).

Alternatives to Apple Messages

same job, measured the same way
MCP Teams
by dockndevai

Read Microsoft Teams teams, channels, chats and messages, and post/reply/send, safe by default.

24 installs/wk local only
Apple Mail
by mgcrea

Search, read and act on Apple Mail — threads, attachments, body search, writes off by default

400 installs/wk local only
Apple Reminders
by mgcrea

Search, read and act on Apple Reminders — lists, due dates, writes off by default

370 installs/wk local only
Apple Calendar
by mgcrea

Search, read and act on Apple Calendar — ranges, free-time lookup, writes off by default

457 installs/wk local only
Apple Contacts
by mgcrea

Search and read Apple Contacts — resolves numbers and emails to names, writes off by default

272 installs/wk local only
Apple Notes
by mgcrea

Search, read and act on Apple Notes — folders, attachments, writes off by default

329 installs/wk local only
Conduit Mail
by conduitmail

Your mailbox for MCP clients: search, read, draft, send, rules and notes. Sending is off by default.

answering
Waspy
by waspytech

Search contacts, read chats, and send confirmed messages for one Waspy account.

answering

Apple Messages — questions

Answers built from our own checks of this server.

Why is there no uptime for Apple Messages?
Apple Messages runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @mgcrea/mcp-apple-messages was installed 319 times last week.
How do I connect Apple Messages?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @mgcrea/mcp-apple-messages straight from npm; nothing to host, nothing to sign up for.
How many people use Apple Messages?
The npm package @mgcrea/mcp-apple-messages was installed 319 times in the last week. Week over week that is +239%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Apple Messages open source?
Yes — it is published under the MIT licence, written in TypeScript, 5 stars on GitHub and 2 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.