mac-cleaner
mac-cleaner-mcp
公式のModel Context Protocol TypeScript SDKを通じて公開される、保守的なmacOS開発者向け/ストレージクリーナーです。完全なディスク最適化ツールではありません。まずレポートを出力し、広範囲に破壊的な場所を拒否し、ドライランをサポートします。
ツール
scan_junk: DerivedData、iOS DeviceSupport、Gradle/Androidキャッシュ、Homebrewキャッシュ、Nodeパッケージキャッシュ、Dockerの再利用可能なスペース、~/Library/Caches、大きなDownloadsファイル(>100 MB)、および検出されたnode_modules。clean_junk: カテゴリを受け入れ、デフォルトはdryRun: trueです。クリーンアップできるのはDerivedData、DeviceSupport、Android/Gradle、Homebrew、Dockerのみです。Downloads、node_modules、および広範囲のキャッシュルートは意図的に拒否されます。get_disk_usage: 選択したパスに対してdfを実行します。
Related MCP server: mac-disk-cleaner
インストールと実行
macOS、Node.js 20+、およびオプションでDockerが必要です。rootとして実行しないでください。
git clone https://github.com/FFFames/mac-cleaner-mcp.git
cd mac-cleaner-mcp
npm install
npm run build
node dist/index.jsMCPはstdioを使用するため、プロセスはMCPクライアントによって起動される必要があります。クリーンアップはファイルを削除する可能性があります。dryRun: falseを設定する前に、ドライランの出力を確認し、バックアップを保持してください。
Claude Desktop / Cursor
クライアントのMCP設定にdist/index.jsへの絶対パスを追加します:
{"mcpServers":{"mac-cleaner":{"command":"node","args":["/ABSOLUTE/PATH/mac-cleaner-mcp/dist/index.js"]}}}クライアントを再起動し、scan_junkを呼び出し、次に選択したカテゴリとdryRun: trueでclean_junkを呼び出します。結果を確認した後でのみfalseを使用してください。CursorはそのMCP設定を通じて同じstdio MCPサーバー構成をサポートしています。
Poke / リモートブリッジ
ローカルのPoke互換ブリッジの場合、このサーバーを子プロセスとして実行し、認証されたHTTPSエンドポイントを介してMCP JSON-RPCのstdin/stdoutをプロキシします。簡単なオプションは、SSH/HTTPブリッジまたは独自のブリッジプロセスの前にngrokを使用することです:
ngrok http 8787ブリッジのアップストリームコマンドをnode /ABSOLUTE/PATH/mac-cleaner-mcp/dist/index.jsとして設定し、HTTPSのngrok URLをPoke/MCP接続に登録します。認証されていないエンドポイントを公開しないでください。ngrokの認証トークンを使用し、呼び出し元を許可リストに登録し、URL/トークンをローテーションしてください。クリーナー自体はローカルのみで、ネットワークリスナーはありません。
安全性
実装は明示的なカテゴリ許可リストを使用し、シェルのワイルドカード展開は行わず、デフォルトでドライランを実行し、Downloads、node_modules、およびユーザーキャッシュルート全体を拒否します。使用前にソースを確認し、重要でないアカウントでテストしてください。
Available Tools
3 toolsclean_junkA
Safely remove selected caches. Always dry-run first.
| Name | Required | Description | Default |
|---|---|---|---|
| dryRun | No | ||
| categories | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavior on its own. It hints at safety with 'Safely' and the dry-run instruction, which implies this is a destructive operation that can be previewed. But it does not state what gets permanently destroyed, whether confirmation is needed, or any permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences deliver purpose and the critical safety tip with zero waste. The instruction is immediately actionable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is a simple mutation with two parameters and no output schema. The description covers the essential safety guidance but omits what happens after running (e.g., return value, confirmation prompts) and does not specify any prerequisites or side effects beyond the dry-run caution. It is adequate but not exhaustive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description should compensate, but it adds no parameter-specific information. The schema's enum values (e.g., 'derivedData', 'brew') are self-explanatory, and the default for dryRun is documented in the schema, but the description does not clarify how parameters interact or what the consequence of each selection is.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb ('remove') and resource ('selected caches'), and the qualifier 'selected' signals user-controlled scope. It distinguishes this from scan_junk (which likely scans) and get_disk_usage (which measures usage) via the explicit removal action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The instruction 'Always dry-run first' provides an important safety guideline for usage. However, it does not explicitly mention when to use this tool versus alternatives (e.g., 'run scan_junk first to identify caches'), leaving that routing implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_disk_usageC
Report disk capacity and free space.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | / |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It implies a read-only operation ('report') but doesn't describe the output format, whether it scans the entire disk or just a mount point, or any side effects. This minimal disclosure is insufficient for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that fronts the core action. There is no fluff. However, its brevity omits essential context, making it minimal rather than well-structured; it earns its place but doesn't provide enough value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one optional parameter and no output schema, the description is incomplete. It fails to clarify whether the report covers the whole disk, a specific path, or what the output looks like. It doesn't explain how the path parameter affects results, leaving the agent without enough information to use the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for the undocumented 'path' parameter. However, the description makes no mention of 'path' whatsoever. An agent receives no explanation of what the parameter does, its default value, or how it affects the report.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Report disk capacity and free space.' It uses a specific verb (report) and resource (disk usage), and the subject matter distinctly separates it from siblings scan_junk and clean_junk, which deal with junk files. However, it doesn't explicitly mention the path parameter or differentiate itself by name, so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. The description doesn't mention the siblings or any conditions for when checking disk usage would be appropriate, leaving the agent to infer when this tool should be invoked.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scan_junkD
Scan macOS developer/system caches and reclaimable space.
| Name | Required | Description | Default |
|---|---|---|---|
| categories | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must cover behavior. It says 'Scan' which implies a read-only operation, but it does not explicitly state that it does not modify anything, nor does it disclose what it returns (e.g., a list of caches, sizes). No permissions or side effects are mentioned, leaving significant behavioral ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, which is concise, but it is under-specified rather than efficiently detailed. It front-loads the verb 'Scan' but provides no useful structure or breakdown of capabilities. It is more an under-specification than a model of conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and a parameter with zero schema descriptions, the description is grossly incomplete. An agent cannot determine what the tool returns, how to use the categories parameter, or how this tool relates to cleaning and disk usage. Essential information is entirely absent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter, 'categories', is an array with enum values, but the schema lacks any descriptions (coverage 0%). The description does not mention the parameter at all, so the agent has no idea what values to pass or what they control. Description fails to compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the verb 'Scan' and the resource 'macOS developer/system caches and reclaimable space', which conveys a broad intent but is vague. It does not distinguish from sibling tools like clean_junk or get_disk_usage, and the phrase 'reclaimable space' is not a concrete resource. It is not a tautology, but it lacks specificity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives such as clean_junk or get_disk_usage. There is no mention of prerequisites, typical use cases, or exclusions. The agent is left to infer the tool's role in the workflow.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v1.0.0- First observed
clean_junk - First observed
get_disk_usage - First observed
scan_junk
TDQS
Scored across 3 tools
Each tool has a clear, distinct purpose: scanning for junk, cleaning junk, and reporting disk usage. No overlap or ambiguity between them.
All tool names follow a consistent verb_noun snake_case pattern (scan_junk, clean_junk, get_disk_usage), making them predictable and readable.
With only 3 tools, the set is minimal but well-scoped for its intended purpose. The count is within the ideal 3-15 range and each tool contributes to the core workflow.
The set covers the essential lifecycle: scan to find junk, clean to remove it, and get_disk_usage for context. Minor gaps like granular junk category selection or detailed scan reports are absent but not critical.
Maintenance
Related MCP Connectors
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Stop your agent before it runs rm -rf /etc or emails your .env. Deterministic preflight checks.
Scan, fix and justify your application code until it is approved to ship.
Scan AI agent skills, MCP server packages and MCP configs before you install them. Static analysis.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables LLM agents to safely reclaim disk space by deleting build artifact directories like node_modules, .venv, and target, with strong guardrails to prevent accidental or malicious deletion.MIT
- AlicenseNot gradedqualityBmaintenanceEnables natural-language management of macOS disk cleanup by scanning large files, AI model weights, and caches, identifying duplicates, and safely moving files to Trash or permanently deleting them with confirmation.MIT
- AlicenseAqualityBmaintenanceEnables monitoring Linux RAM/swap and /tmp tmpfs pressure, detecting and safely sweeping orphaned development workers behind a protected denylist with dry-run safeguards, and removing age-gated stale sockets and scratch caches.5MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to scan a developer machine for disk space hogs, audit git worktrees for stale or orphaned ones, re-check individual findings, and run allowlisted cleanup actions as dry runs unless explicitly confirmed. Risky items are reported with warnings and refused by default.1MIT