OSX-MCP
Privacy policy
This policy applies to the OSX-MCP macOS application published by Mehdi Hosseini (“we”, “us”). OSX-MCP is a local MCP server: it lets an AI client you choose operate this Mac, with permissions and confirmations you control.
We do not collect your data
OSX-MCP does not create an account, does not include advertising or analytics SDKs, and does not transmit personal data, usage data, diagnostics, or identifiers to us. We do not sell or share personal information.
What stays on your Mac
The app stores configuration, grants, workflow definitions, and a local audit log under ~/.osx-mcp on this computer. Audit entries record that a tool ran; they do not store passwords, screenshot pixels, audio, file contents, or shell command strings.
Removing the app and that folder removes the local records. There is no cloud copy on our side to delete.
On-device capabilities
Depending on what you enable, OSX-MCP may use macOS permissions on this Mac only:
- Accessibility — inspect and operate other apps through the Accessibility API.
- Screen Recording — screenshots and on-device OCR, only if you use those tools.
- Speech Recognition — on-device transcription of system audio if you enable listen-to-audio. Capture is discarded after transcription. If on-device recognition is unavailable, the tool errors instead of uploading audio.
- Apple Events — a small set of adapters (Shortcuts, notifications) where Accessibility is not enough.
Password fields are never read. Protected apps can be excluded from full-display capture on supported macOS versions.
Connected AI clients
OSX-MCP speaks MCP to the client you configure (for example Claude, ChatGPT, Cursor, Codex, or a local model). We do not operate those services. Whatever that client is allowed to see — window titles, text you ask it to read, screenshots you allow — may be sent to that provider under their privacy policy. That is your relationship with the client, not data collection by OSX-MCP.
A local model through Ollama never leaves the machine unless you have configured that software otherwise.
Network
The default server uses stdio and does not listen on the network. Optional HTTP is loopback by default. Binding off loopback without an auth key is refused. The optional fetch_url tool retrieves a public web page you asked for; it refuses private and loopback addresses.
Children
OSX-MCP is a developer tool. It is not directed at children and does not knowingly collect personal information from children.
Changes
If this policy changes, we will update the date on this page. Continued use after a change means you accept the updated policy.
Contact
Privacy questions: osx-mcp-support@agani.app
Issues: github.com/imehdihosseini/osx-mcp/issues