MCP ConfigsMay 12, 2026·2 min read

Mac Messages MCP — iMessage/SMS Bridge

Mac Messages MCP is a Python MCP server for Messages.app on macOS: read chats, send replies, search attachments, and fall back to SMS/RCS.

MCP Hub
MCP Hub · Community
Agent ready

Safe staging for this asset

This asset is staged first. The copied prompt tells the agent to inspect the staged files and ask before activating scripts, MCP config, or global config.

Stage only · 17/100Policy: stage
Agent surface
Any MCP/CLI agent
Kind
Mcp Config
Install
Stage only
Trust
Trust: Established
Entrypoint
Asset
Safe staging command
npx -y tokrepo@latest install df487610-fc3e-5ad5-b6b5-0274eb9f18db --target codex

Stages files first; activation requires review of the staged README and plan.

Intro

Mac Messages MCP is a Python MCP server for Messages.app on macOS: read chats, send replies, search attachments, and fall back to SMS/RCS.

  • Best for: Personal agent workflows on macOS (triage, summaries, replies) for your own messages
  • Works with: macOS 11+; Python 3.10+; uv/uvx; Claude Desktop or Cursor MCP support (per README)
  • Setup time: 10–25 minutes (plus macOS permissions)

Practical Notes

  • GitHub: 280 stars · 22 forks; pushed 2026-05-10 (verified via GitHub API).
  • README requires Full Disk Access so the server can read the local Messages database.
  • README documents progressive attachment access (discover → search → fetch) to reduce accidental data exposure.

Main

Use it responsibly:

  • Only connect it on a machine you control, and treat conversation data as sensitive.
  • Prefer read-only tools for dashboards and summaries; gate “send” behind an explicit confirmation step.
  • If you run both Cursor and Claude Desktop, follow README guidance: run only one server instance to avoid database locks.

This turns iMessage/SMS into a real agent channel while keeping a human in the loop for outbound actions.

FAQ

Q: Why does it need Full Disk Access? A: README says it reads the local Messages database, which macOS protects behind Full Disk Access.

Q: Can it send SMS to Android users? A: README says it automatically chooses iMessage or SMS/RCS based on recipient availability.

Q: How do I reduce privacy risk? A: Use progressive disclosure for attachments and require confirmation before sending messages.

🙏

Source & Thanks

Source: https://github.com/carterlasalle/mac_messages_mcp > License: MIT > GitHub stars: 280 · forks: 42

Discussion

Sign in to join the discussion.
No comments yet. Be the first to share your thoughts.

Related Assets

AgenticMail — Email + SMS Infra for AI Agents (MCP)

AgenticMail provides email + SMS infrastructure for AI agents, with a CLI setup wizard plus an MCP server so tools can send/receive messages under control.

MCP Configs
MCP Hub

WhatsApp MCP Server — Chat with WhatsApp via AI Agents

MCP server connecting Claude and AI agents to your personal WhatsApp. Search contacts, read messages, send replies and media via natural language.

MCP Configs
MCP Hub

pentest-ai — Offensive Security MCP for Claude Code

pentest-ai is a Python CLI and MCP server that lets Claude Code run verified probes, chain attack paths, and export reports for authorized testing.

MCP Configs
MCP Hub

mcp-server-apple-events — macOS Reminders MCP

mcp-server-apple-events exposes macOS Reminders/Calendar actions to MCP clients via Apple Events, with an `npx` quick start and ready-to-copy configs.

MCP Configs
MCP Hub
◈Home🔍Search👤Me