mcp-macos
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MACOS_MODE | No | Access mode: read-only, read-write, or admin. Higher-capability tools are only registered when you raise the mode. | read-only |
| MACOS_DRY_RUN | No | Set to 'true' to validate mutating tools and log intent without performing the action. | false |
| MACOS_AUDIT_LOG | No | Set to 'false' to disable audit logging. Defaults to 'true'. | true |
| MACOS_ALLOW_EXEC | No | Set to 'true' to enable run_command, run_applescript, and kill_process (in addition to admin mode). | false |
| MACOS_ALLOW_INPUT | No | Set to 'true' to enable GUI automation tools: type_text, key_press, click, move_mouse. | false |
| MACOS_ALLOW_DELETE | No | Set to 'true' to enable delete_path (moves to Trash). | false |
| MACOS_PATH_ALLOWLIST | No | Comma-separated root paths. When set, any file operation outside them is refused. | |
| MACOS_PROTECTED_PATHS | No | Comma-separated paths that are readable but never mutated. Defaults include system and secrets paths. | /System,/usr,/bin,/sbin,/private,/Library,~/.ssh,~/.aws,~/.gnupg,~/Library/Keychains |
| MACOS_COMMAND_ALLOWLIST | No | Comma-separated program names. When set, run_command may only invoke these programs. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| system_infoA | Report macOS version, hardware, memory, load, uptime and the current user. |
| list_directoryA | List the entries (name, type, size) of a directory. Honours the path allowlist. |
| read_fileA | Read a text file's contents (capped at MACOS_MAX_FILE_BYTES). Honours the path allowlist. |
| list_processesA | List running processes (pid, cpu%, mem%, command), busiest first. |
| get_clipboardA | Return the current text contents of the macOS clipboard. |
| list_appsA | List the names of currently running (non-background) applications. |
| get_frontmost_appA | Return the name of the frontmost (active) application. |
| screenshotA | Capture the screen and return it as a PNG image. Needs Screen Recording permission for the host process. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 8 tools
Every tool has a clearly distinct purpose: system summary, directory listing, file reading, process listing, clipboard access, app listing, active app lookup, and screen capture. Even related tools like list_apps and get_frontmost_app are cleanly separated by scope.
Most tools follow a clear list_* or get_* verb pattern, with read_file as another verb_noun. system_info and screenshot break the pattern, but the naming remains readable and mostly predictable.
Eight tools is well-scoped for a macOS observation/utility server. Each tool covers a distinct capability and none feel redundant or excessive.
The server covers common macOS inspection needs: system status, file browsing, process listing, clipboard, apps, and screen capture. It is intentionally read-only, so missing write operations are not glaring gaps, though a few extensions like file metadata or clipboard image support could be added.