macOS Local MCP

简体中文 · English

中文： 让 ChatGPT 在 Chat 模式中也可以通过 MCP 读取本机文件、写入文件、查看屏幕并操作 macOS 桌面。当前 0.1.1 版本为 experimental：文件与目标锁逻辑已有自动测试，但真实 Mac 上的 Accessibility、Screen Recording、窗口激活和真实输入仍需实机验收。

English: Give ChatGPT in Chat mode MCP-based access to local files, file writes, screen viewing, and macOS desktop control. Version 0.1.1 is experimental: file handling and target-lock semantics have automated coverage, but Accessibility, Screen Recording, window activation, and real input still require validation on a physical Mac.

• 中文完整说明：README.zh-CN.md

• Full English documentation: README.en.md

• 安全说明 / Security: SECURITY.zh-CN.md · SECURITY.en.md

• 验证记录 / Validation: VALIDATION.zh-CN.md · VALIDATION.en.md

• License: MIT

权限与风险 / Permissions and risk

中文： 这是高权限本机工具，不是操作系统沙箱。文件工具拥有当前 macOS 用户本来具有的文件权限；授予 Accessibility 后宿主进程可以控制普通应用，授予 Screen Recording 后可以读取屏幕和其他应用窗口内容。macOS 的 TCC 权限通常授予实际运行 MCP 的 Terminal、iTerm 或其他宿主，因此授权范围可能大于单个 Python 脚本。目标锁、暂停、备份和审计只能降低误操作风险。处理密码管理器、支付、敏感账号、医疗/财务信息或重要生产数据时应暂停服务。

English: This is a high-privilege local tool, not an operating-system sandbox. File tools operate with the current macOS user's file permissions. Granting Accessibility lets the host process control ordinary applications, while Screen Recording lets it observe screen and window contents. macOS TCC permissions are generally granted to the actual Terminal/iTerm/host process running MCP, so the permission scope can be broader than one Python script. Target locking, pause controls, backups, and audit logs reduce mistakes but do not create a low-privilege boundary. Pause the service around password managers, payments, sensitive accounts, health/financial information, or important production data.

See SECURITY.zh-CN.md / SECURITY.en.md for details.