Macos Automator MCP Server

macOS AppleScript and JXA automation scripts executed via MCP for your AI assistant.

Data last scanned today · Reviewed today

451 dangerous tool2 tools858TypeScriptMIT

Overview

This server integrates AppleScript and JavaScript for Automation (JXA) into your AI workflow, allowing an AI assistant to control macOS applications. It provides access to over 200 pre-programmed automation sequences, enabling tasks ranging from toggling system settings to extracting data from browser windows. To function, the server requires specific macOS system-level permissions. You must manually configure Privacy & Security settings for the host application—such as Terminal—to ensure it possesses sufficient Automation and Accessibility rights to simulate clicks and interact with other software on your system.

Our verdict

This server holds a security score of 45/100, indicating a high risk level. This rating stems from the fact that it is a community-maintained project rather than an official vendor tool, and the critical aspects like OAuth and read-only support have not been editorially reviewed. Given the nature of the tool requires granting broad system permissions to your AI environment, it should only be used by developers who are comfortable manually auditing the code and managing macOS security settings.

  • Includes a library of over 200 pre-built automation recipes
  • Active development with commits as recent as one day ago
  • Uses a lightweight structure with only 4 direct dependencies
  • Open source and released under an MIT license
  • Requires sensitive macOS Automation and Accessibility permissions
  • Security-critical features like OAuth remain unreviewed
  • Maintained by the community without official Apple support

Setup

Claude Desktop
{
  "mcpServers": {
    "macos-automator-mcp": {
      "args": [
        "-y",
        "@steipete/macos-automator-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
execute_scriptThe tool used to launch and run AppleScript or JXA code, either as raw content, from a file path, or via a pre-defined knowledge base ID.high
get_scripting_tipsSearches and retrieves information from the built-in knowledge base of over 200 pre-programmed automation recipes.low

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

What software prerequisites are required to run this MCP server?

You must have Node.js version 24.0.0 or higher installed, and the server must be running on a macOS machine.

What macOS permissions are needed for the server to function?

You must grant the application running the server Automation permissions to control other apps and Accessibility permissions to perform UI actions like clicks and keystrokes via System Settings.

Can the server automatically grant itself the necessary system permissions?

No, the server cannot grant its own permissions. You must manually configure them in System Settings, and you may still encounter confirmation prompts when interacting with specific applications for the first time.

How can I discover available automation sequences?

You can use the get_scripting_tips tool provided by the server to view available script IDs and their descriptions from the built-in knowledge base.

What methods can I use to provide scripts for execution?

You can execute scripts by providing raw code via script_content, referencing an absolute file path via script_path, or selecting a pre-defined ID from the knowledge base using kb_script_id.

Alternatives

Changelog

Badge

Macos Automator MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.