Mac Messages MCP Server

Search, read, and send iMessages directly from your AI agent using local macOS databases.

Data last scanned today · Reviewed today

53 1 dangerous tool11 tools★ 325PythonMIT

Overview

Mac Messages MCP provides an interface to interact with your native Apple messaging environment. It leverages local databases to perform message searches, retrieve contact information, and execute outbound communication commands directly from your preferred MCP client. Designed for local execution, the server requires Full Disk Access to parse your Messages and Contacts archives. It supports complex operations including fuzzy text matching, group chat identification, and handling message attachments, while integrating with macOS native automation for sending iMessages.

Our verdict

This server carries a high risk level with a security score of 48/100, primarily because the authentication methods and read-only mode claims have not been independently reviewed. Because this tool requires Full Disk Access to sensitive private correspondence and the ability to send messages via automation, it is recommended only for power users who understand the implications of granting broad system permissions to local AI processes.

Supports both iMessage and SMS/RCS fallback messaging.
Zero direct dependencies simplifies the supply-chain surface area.
Includes built-in diagnostic tools for database permissions.
HEIC to PNG conversion for image attachments.

High security risk due to unreviewed authentication methods.
Requires sensitive Full Disk Access permissions on macOS.
Not maintained by an official vendor.
Read-only mode verification is pending.

Tools

Tool	Description	Risk
tool_get_recent_messages	Read recent messages, optionally filtered by contact or group chat ID	low
tool_fuzzy_search_messages	Search message bodies by approximate text match; defaults to 30 days, or use hours=0 for all history	low
tool_find_contact	Fuzzy-match a name in Contacts and return phone numbers	low
tool_get_chats	List named group chats and their identifiers	low
tool_search_attachments	Find attachment metadata by date, contact, MIME type, and limit	low
tool_get_attachment	Fetch one attachment by ID, inline when supported or as a local path	low
tool_check_imessage_availability	Check likely iMessage availability for a phone number or email	low
tool_check_db_access	Diagnose access to ~/Library/Messages/chat.db	low
tool_check_contacts	Return a contact count and a small sample	low
tool_check_addressbook	Diagnose Contacts/AddressBook database access	low

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›What are the system requirements for this server?

This server is exclusive to macOS and requires Python 3.10 or newer. You must also have the uv package manager installed.

›What permissions must be granted to the client app?

You must grant Full Disk Access to the application launching the MCP server via macOS System Settings. Additionally, macOS may prompt for access to Contacts and permission to automate Messages during your first use.

›How does this server handle image attachments?

The server returns small images inline and converts HEIC images to PNG format. For larger or non-image files, it returns the local file path.

›What should I do if my MCP client cannot locate uvx?

Run 'which uvx' in your terminal to find the absolute path to the executable. Replace the generic 'uvx' command in your configuration file with that full path, such as '/opt/homebrew/bin/uvx'.

›Are there any specific requirements for sending messages?

You must have the Messages app open, signed into an account, and verified to be working for standard messaging. Sending messages also requires the host app to have authorization to automate Messages.app.

›How can I troubleshoot database access issues?

You can use the built-in 'tool_check_db_access' and 'tool_check_addressbook' tools from within your MCP client to diagnose permissions for the Messages and Contacts databases.