shortcut-forge: the Apple Shortcuts MCP server that ships shortcuts that actually run
Describe an automation to Claude, Codex or ChatGPT → get a signed .shortcut file → tap it on your iPhone.
Apple Shortcuts MCP · iOS Shortcuts generator · Siri Shortcuts for AI agents · iOS 27 aware · macOS auto-signing · open shortcut library
The problem (you've probably said one of these)
"I asked ChatGPT for a shortcut and got fourteen steps to tap in by hand."
"The file imported fine. Then: 'Choose a value for each parameter of this action.'"
"iOS 27 can build a shortcut from a description, but only on my iPhone 15 Pro, one shortcut at a time, and I can't review or version what it changed."
"Every MCP server I found for Shortcuts only runs shortcuts I already have."
"Every time I fix the family shortcut, everyone has to download it again."
Apple Shortcuts is the most powerful automation layer on the iPhone, and still the hardest thing to get an AI to produce. The file format is undocumented, a structurally valid plist can still break on the device, and nothing catches the difference until you're staring at an error on your phone.
The fix
shortcut-forge is an MCP server, a Claude plugin and a Python library that turns "make me a shortcut that…"
into a signed .shortcut file that has been checked against the ways shortcuts really fail on iPhone.
You: "Every time I take my vitamins, log them to Apple Health, tick off today's reminder
and set up tomorrow's, but never create duplicates."
Claude: → shortcut_library("supplements") → shortcut_from_template("supplement-tracker", …)
✓ 750 actions · 0 lint errors · signed on your Mac
→ ~/Downloads/shortcut-forge/Supplement Check.shortcut (AirDrop / iCloud Drive → tap → Add)
| Apple "Describe a Shortcut" (iOS 27) | Asking a chatbot | Other Shortcuts MCPs | shortcut-forge | |
|---|---|---|---|---|
| Works from Claude, Codex, ChatGPT, Cursor… | – | ✓ | some | ✓ |
| No new iPhone required | needs iPhone 15 Pro+ / Apple silicon | ✓ | ✓ | ✓ |
| Output you can read, diff, version, review | – | text | varies | JSON spec + plist |
| Checked against real on-device failures | n/a (native) | – | structure only | 15 semantic rules |
| Signed and importable on iPhone | ✓ (native) | – | rarely | ✓ auto on macOS |
| Updates without re-downloading | – | – | – | remote config + update check |
| Shared, remixable library | – | – | – | ✓ 20+ entries |
Apple's built-in builder is great for quick personal one-liners and lives right in the app; use it. Reach for shortcut-forge when you want an AI you already use to build something bigger, reviewable and shareable.
Install
Claude Code (plugin = MCP server + skill + /shortcut command)
/plugin marketplace add Hyunki6040/shortcut-forge
/plugin install shortcut-forge@shortcut-forge
Claude Desktop: double-click shortcut-forge.mcpb from Releases, or:
{ "mcpServers": { "shortcut-forge": { "command": "uvx", "args": ["shortcut-forge", "mcp"] } } }
OpenAI Codex
codex mcp add shortcut-forge -- uvx shortcut-forge mcp
ChatGPT, Gemini, any chatbot: connect over HTTP (shortcut-forge mcp --http) or, with no MCP at all, paste
prompts/LLM_PROMPT.md and drop the JSON it writes into the Mac watch folder (below).
Cursor, VS Code, Windsurf, Gemini CLI: see docs/CLIENTS.md.
Python / CLI
uv tool install shortcut-forge # or: pipx install shortcut-forge
shortcut-forge template supplement-tracker --sign
Mac auto-signing: drop a spec, get a shortcut
iOS only imports signed shortcuts, and only a Mac can sign them. shortcut-forge makes that invisible:
shortcut-forge mac install-agent # launchd agent, starts at login
iCloud Drive/Shortcut Forge/ ← drop *.json specs or *.unsigned.shortcut (from any device or AI)
iCloud Drive/Shortcut Forge/Signed/ ← signed .shortcut appears in seconds → open it on your iPhone
iCloud Drive/Shortcut Forge/Failed/ ← anything that failed lint, with a .log explaining why
Ask ChatGPT on your phone for a spec, save it to Files, and the shortcut is ready on the same phone before you finish your coffee. In Claude Desktop / Claude Code on a Mac, signing happens inside the tool call.
What people build with it
From the Open Shortcut Library. Every one is a readable spec, lint-clean in CI.
| Shortcut | What it does | |
|---|---|---|
| 🌤 | Morning Brief | Your messy thoughts → a 3-line plan by Apple Intelligence → a reminder |
| 🎯 | Focus Block | Blocks 25/50/90 min on your calendar from right now |
| ✅ | Meeting → Action Items | Notes in, reminders out, summary on the clipboard |
| 🌐 | Clipboard Translate | Translate whatever you copied, result back on the clipboard |
| ☕️ | Caffeine Log | One tap → Apple Health, warns past 400 mg |
| 💸 | Expense Log | Amount + category → CSV in Stored Content → paste into your sheet |
| 🅿️ | Parking Spot | Save where you parked, open it in Maps later |
| 📡 | Webhook Trigger | POST JSON to n8n / Zapier / Home Assistant |
| 🐙 | GitHub Issue | File an issue from your phone |
| 🍱 | Lunch Picker | Reads options from a JSON URL: edit once, every phone updates, no reinstall |
| 💊 | 영양제 체크 (the original) | The real 1,073-action shortcut that started this project. Two people, ten time slots, alternate-day doses, Health + Reminders + Apple Intelligence |
…and more: mood journal, sleep diary, grocery list, weather voice brief, low-battery nudge, water log.
Built something? Share it → Tell your AI "submit this to the shortcut-forge library".
Use it
Plain language in any MCP client:
- "Make a shortcut that asks how I slept and every Sunday has Apple Intelligence summarise the week."
- "Start from the library's expense log, but in won and with my categories."
- "Here's my exported shortcut. Why does it crash?" →
shortcut_lint+shortcut_inspect
Python: variables work in f-strings.
from shortcut_forge import Shortcut
sc = Shortcut("Hello", version="1.0.0")
name = sc.ask("What's your name?")
with sc.if_(name, "contains", "Claude") as br:
sc.notify("Hi twin", f"Nice to meet another Claude, {name}")
br.otherwise()
sc.notify("Hi", f"Welcome, {name}")
sc.storage_set("last_name", name) # iOS 27 Stored Content, done right
sc.health_log("Vitamin D", "50") # mcg → mg handled for you
sc.save("Hello.unsigned.shortcut")
JSON (what the MCP tools and chatbots write): 50+ step types, plus a raw escape hatch for any action.
{"name": "Hello", "version": "1.0.0", "actions": [
{"ask": "What's your name?", "as": "name"},
{"if": ["{{name}}", "contains", "Claude"],
"then": [{"notify": "Hi twin", "body": "{{name}}"}],
"else": [{"notify": "Hi", "body": "Welcome, {{name}}"}]}
]}
MCP tools
| Tool | What it does |
|---|---|
shortcut_build |
JSON spec → .shortcut, always linted, signed on macOS |
shortcut_library |
Browse / fetch 20+ community shortcuts as starting points |
shortcut_from_template |
supplement-tracker (multi-user), water-log |
shortcut_lint |
15 rules (SF000–SF014) for any unsigned shortcut, including ones exported from the app |
shortcut_inspect |
Indented outline of a shortcut |
shortcut_sign |
shortcuts sign wrapper, verifies the AEA1 header |
shortcut_publish |
Sign + manifest.json so installed copies can update themselves |
shortcut_submit |
Package your shortcut + PR commands for the library |
shortcut_llm_prompt |
System prompt for chatbots without MCP |
shortcut_reference |
spec · pitfalls · lint-rules · health-types · templates · library · ios27 |
Field notes: why "it imported" isn't "it works"
We built a two-person tracker by having Claude generate the plist. It took more than a dozen import → run → screenshot rounds. Every failure was invisible at build time:
| What we wrote | What the iPhone did | Rule |
|---|---|---|
| Stored Content set from a variable | Saved nothing, no error | SF001 |
| Health sample "77.4 mcg" of B12 | Logged 77,400,000 mcg (the unit string is read as grams) | SF003 |
If <dictionary value> is "Lunch" |
Comparison field empty → run aborted | SF005 |
| Delete a stored key that isn't there | Error 16 | SF002 |
| Mark found reminders as done | A picker popped up mid-run | SF007 |
| Get Contents of URL on every run | Offline once → whole shortcut aborts | SF014 |
| Create tomorrow's reminder | Duplicates on every run | builder |
The builder can't produce these; the linter catches them in any shortcut. Full notes: PITFALLS.md.
What is a .shortcut file?
- A
.shortcutfile (not.shortor.shortcuts) is an Apple Shortcuts workflow: a binary property list (WFWorkflowActions,WFWorkflowIcon, …) where every action is an identifier likeis.workflow.actions.gettextplus parameters. Variables are "token strings" with UTF-16 offsets. - Since iOS 15, shared shortcut files must be signed. A signed file is an Apple Encrypted Archive whose first
bytes are
AEA1. Unsigned plists import on a Mac but iOS refuses them. - Signing modes:
anyone(any device can import) orpeople-who-know-me(contacts only). Only macOS can sign (shortcuts sign), which is why shortcut-forge automates the Mac side. .wflowwas the format of the old Workflow app that became Shortcuts; iCloud links (icloud.com/shortcuts/…) are snapshots created from the app and can't be generated or updated programmatically.
FAQ
Do I need a Mac? To sign, yes (Apple's rule). Building and linting run anywhere; the watch-folder agent lets
one Mac sign for every device you own.
Does my data leave my machine? No. The server runs locally; nothing is uploaded. Library shortcuts that use
remote_config fetch only the JSON URL they name.
Is this affiliated with Apple or Anthropic? No. It is an independent open-source project.
iOS 26 or older? Most actions work; Stored Content needs iOS 27 and Use Model needs Apple Intelligence (the
linter flags these as SF013).
Roadmap: the update problem (help wanted)
Today every shortcut fix means re-sign → re-share → everyone re-downloads and taps "Replace". v0.2 ships the first
answers (remote_config for data, update_check + publish for code, a signing watch folder). Next is a
Shortcut Hub: one-command publish to GitHub, a stable install URL that always serves the latest version,
settings that survive updates, a signing relay for teams, and an experimental loader pattern.
Read ROADMAP.md and pick something. Device reports from real iPhones are the most valuable
contribution of all.
Contributing
- Share a shortcut → LIBRARY.md
- Found a new way shortcuts break? Open a pitfall issue with the error screenshot and the smallest spec; it becomes a lint rule and a builder fix.
- Code → CONTRIBUTING.md · agents read AGENTS.md
MIT licensed. Not affiliated with Apple Inc. or Anthropic. "Shortcuts" and "Siri" are trademarks of Apple Inc.
If shortcut-forge saved you a round of error screenshots, a ⭐ helps the next person find it.
Keywords: Apple Shortcuts MCP, iOS Shortcuts MCP server, Siri Shortcuts AI generator, create .shortcut file programmatically, sign shortcut macOS CLI, Claude Shortcuts, Codex Shortcuts, ChatGPT Shortcuts, iOS 27 Shortcuts Stored Content, Apple Health shortcut, shortcut library.
Metadata
Release files for shortcut-forge 0.2.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| shortcut_forge-0.2.1.tar.gz | 1.0 MB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| shortcut_forge-0.2.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 1.5 MB
Release files / shortcut_forge-0.2.1.tar.gz
| Download URL | shortcut_forge-0.2.1.tar.gz |
|---|---|
| Size | 1.0 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1025695c5d5405554946547ee765bdc572e749d0cda7289ee9b0f4bc4755480c
|
|
BLAKE2b-256 checksum How to use checksums |
0d7dd2a2016a353c191af3fe8d17df2fab4c1df78ad3686d521da50a78aefa1c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 14, 2026.
Transparency logRelease files / shortcut_forge-0.2.1-py3-none-any.whl
| Download URL | shortcut_forge-0.2.1-py3-none-any.whl |
|---|---|
| Size | 523.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
130af2b9f5673239221d6bcbce942f40429a6531a11d756df47d42dd1913641e
|
|
BLAKE2b-256 checksum How to use checksums |
00b07713a60f47c725b51c1a831660fd168890a39c3e0a35cdc3eb8a2b3a392d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 14, 2026.
Transparency log