Apple System MCP
Local MCP server for macOS system context, truthful Focus support metadata, assistant-relevant settings reads, explicit settings writes, and bounded GUI fallback automation.
Capabilities
- battery status
- frontmost app
- running applications
- clipboard read and write
- local notifications
- open an application
- appearance settings
- accessibility settings
- Dock settings
- Finder settings
- truthful Focus support metadata
- combined system context snapshots
- appearance mode write
- Finder visibility and bar writes
- Dock write controls for autohide and recent apps
- accessibility writes for reduce motion, increase contrast, and reduce transparency
- GUI fallback tools for menu clicks, key presses, text entry, button clicks, and pop-up selection
- preference-domain inspection via
defaults export - resources:
system://status,system://applications,system://settings,system://context - prompt:
system_capture_context - tool discovery helpers
search_toolsandget_tool_infofor context-constrained clients
Install On This Mac
From a clone
git clone https://github.com/JonathanRReed/Apple-MCPs.git
cd Apple-MCPs
uv sync --all-packages
This builds one workspace environment with every server's entry point in .venv/bin (for example .venv/bin/apple-system-mcp). You can also point an MCP client at AppleSystem-MCP/start.sh, which prefers uv run and falls back to a plain venv bootstrap (Python 3.11+ required).
Install In AI Agents
{
"mcpServers": {
"apple-system": {
"command": "uvx",
"args": ["apple-system-mcp"],
"env": {
"APPLE_SYSTEM_MCP_SAFETY_MODE": "safe_manage"
}
}
}
}
Running from a clone instead? Use /path/to/Apple-MCPs/AppleSystem-MCP/start.sh as the command with empty args.
Claude Code:
claude mcp add --transport stdio --scope project apple-system -- uvx apple-system-mcp
Transport
stdio is the default and recommended transport. Set APPLE_SYSTEM_MCP_TRANSPORT=streamable-http (with optional APPLE_SYSTEM_MCP_HOST and APPLE_SYSTEM_MCP_PORT) to serve Streamable HTTP instead.
Prompting Notes
tools/listreturns the full System tool surface. Context-constrained clients can usesearch_toolsfirst, thenget_tool_infofor the System tool they need.- Use this server when the user’s current desktop context matters.
- Read battery state and the frontmost app before interruptive actions.
- Use the settings tools before falling back to raw
defaults readin prompts or E2E checks. - Use
APPLE_SYSTEM_MCP_SAFETY_MODE=safe_managefor assistant-grade operation. - Keep
safe_readonlyonly for audit-only or context-only deployments. - Keep GUI fallback narrow. Prefer native app-domain MCPs first, then explicit System tools, then GUI tools only when native support is missing.
- Focus reporting is best-effort and truthful. This server does not claim Notification Center history support when macOS does not expose it cleanly on an unsigned local install.
Health And Recovery
system_healthsystem_permission_guidesystem_get_settings_snapshotsystem_get_focus_statussystem_get_context_snapshotsystem_read_preference_domain
Assistant-Grade Control Surface
The launch System write surface is explicit, not generic:
system_set_appearance_modesystem_set_show_all_extensionssystem_set_show_hidden_filessystem_set_finder_path_barsystem_set_finder_status_barsystem_set_dock_autohidesystem_set_dock_show_recentssystem_set_reduce_motionsystem_set_increase_contrastsystem_set_reduce_transparency
The bounded GUI fallback surface is:
system_gui_list_menu_bar_itemssystem_gui_click_menu_pathsystem_gui_press_keyssystem_gui_type_textsystem_gui_click_buttonsystem_gui_choose_popup_value
Launch Checklist
- Add
uvx apple-system-mcp(or a clone'sAppleSystem-MCP/start.sh) to your MCP client - Reload or reconnect the client so the System tool surface is loaded into context
- Call
system_healthfirst - If a scoped system action is blocked, call
system_permission_guide - Call
system_statusto verify the full context surface is available
Release files for apple-system-mcp 1.0.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| apple_system_mcp-1.0.4.tar.gz | 22.1 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| apple_system_mcp-1.0.4-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 41.4 kB
Release files / apple_system_mcp-1.0.4.tar.gz
| Download URL | apple_system_mcp-1.0.4.tar.gz |
|---|---|
| Size | 22.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
54f8d5efff8a59bad17cd68c70f7b8d49d63e2096165ff846498fd7f04840a0c
|
|
BLAKE2b-256 checksum How to use checksums |
a7c310ebed34f839c645246cf49d2c1f0cd46f4a5da3c81f7cc2491aa98fcc21
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 4, 2026.
Transparency logRelease files / apple_system_mcp-1.0.4-py3-none-any.whl
| Download URL | apple_system_mcp-1.0.4-py3-none-any.whl |
|---|---|
| Size | 19.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ca06ee27150471c18f1b6fcda79cc5a70cad0cfdd97587c9b6cd3ffdc3890db5
|
|
BLAKE2b-256 checksum How to use checksums |
c40de4713fd796b37cdeb262c29c6f6fb41fbc4067b824fa929bd9e8c3f2fbff
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 4, 2026.
Transparency log