JonathanRReed/Apple-MCPs

MCP servers that let an AI client use Apple apps and macOS tools. Create reminders, send messages, check calendars, search mail, manage files, and get directions.
The servers run on your Mac. Your MCP client may send returned data to its model provider, and Apple apps may sync through iCloud or another account. Local execution does not mean the data stays local.
Requires Python 3.11+ and macOS. Uses MCP specification 2026-07-28 and Python SDK 2.x, with support for older client protocol revisions. MIT license.
Install
Install uv, then register the unified server with your client.
Claude Code:
Codex:
Other stdio clients:
Run uvx apple-tools-mcp to start the server directly. Standalone servers use the same approach, such as uvx apple-mcp-mail or uvx apple-calendar-mcp.
Restart your client after installing or upgrading. Call search_tools with calendar health to check discovery without reading app data.
For Claude Desktop, download a server's .mcpb bundle from Releases and double-click it.
Set app-specific safety modes and directories in your client's env settings. An explicitly invalid or blank safety setting selects safe_readonly; unset settings retain each domain's documented default. The configuration guide lists defaults and options. Mail attachments are disabled until you set APPLE_MAIL_MCP_ALLOWED_ATTACHMENT_ROOT to a dedicated directory. Files tools only access APPLE_FILES_MCP_ALLOWED_ROOTS; macOS may impose further restrictions.
Choose a server
Start with Apple-Tools-MCP. It combines all ten apps and tools below, plus saved defaults, contact routing, Mail thread helpers, undo, briefings, and cross-app workflows.
Choose a standalone server to expose fewer apps to your client:
| Server | macOS access | Health tool | Permission help |
| --- | --- | --- | --- |
| Mail | Automation access to Mail | mail_health | mail_permission_guide, mail_recheck_permissions |
| Calendar | Calendar access | calendar_health | calendar_permission_guide, calendar_recheck_permissions |
| Reminders | Reminders access | reminders_health | reminders_permission_guide, reminders_recheck_permissions |
| Messages | Automation; Full Disk Access for history | messages_health | messages_permission_guide, messages_recheck_permissions |
| Contacts | Contacts access | contacts_health | contacts_permission_guide, contacts_recheck_permissions |
| Notes | Automation access to Notes | notes_health | notes_permission_guide, notes_recheck_permissions |
| Shortcuts | Usually no separate prompt | shortcuts_health | shortcuts_permission_guide, shortcuts_refresh_state |
| Files | Allowed roots and protected-folder access | files_health | files_permission_guide |
| System | Some actions need System Events, Accessibility, or Automation | system_health | system_permission_guide |
| Maps | No privacy prompt; Swift helper needs Xcode command line tools | maps_health | maps_permission_guide |
The unified server uses apple_health, apple_permission_guide, and apple_recheck_permissions. You must approve permissions yourself in the macOS prompt or System Settings.
Find and use tools
MCP tools/list returns each tool's schemas and read or write annotations. Use search_tools to search names, descriptions, and aliases; use get_tool_info for one tool's schema and examples.