ModelsAtlas
Explore
Atlas / MCP servers / cursortouch / MacOS

MacOSCAUTION

mcp/cursortouch/macos-1
MCP server by cursortouch · computer use · macos · mcp server · Audited 2026-10-07
⚑ Report / re-scanSource ↗

Lightweight MCP server for computer use in MacOS

Verdict
CAUTION
Grade
B
Trust score
81 /100
Exposed tools
—
Transport
stdio · streamable-http
License
MIT
Stars
195
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://mcptoplist.com/server/glama%2FCursorTouch%2FMacOS-MCP)

🍎 macOS-MCP

Overview

macOS-MCP is a lightweight, open-source Model Context Protocol server that bridges AI agents and the macOS operating system. It enables seamless automation of macOS through LLMs via tasks such as file navigation, application control, UI interaction, browser automation, and system operations.

Supported Operating Systems

  • macOS 12 (Monterey)
  • macOS 13 (Ventura)
  • macOS 14 (Sonoma)
  • macOS 15 (Sequoia)
  • macOS 26 (Tahoe)

Key Features

  • Works with Any LLM (Vision Optional)

Unlike traditional automation tools, macOS-MCP doesn't require computer vision, fine-tuned models, or specialized setup. Works seamlessly with any LLM—Claude, GPT, Gemini, or others.

  • Native macOS Integration

Interacts natively with macOS UI elements using the Accessibility API. Opens apps, controls windows, simulates user input, and captures desktop state without workarounds.

  • Rich Toolset for Automation

Complete toolkit for keyboard/mouse operations, window management, UI state capture, interactive element extraction from the accessibility tree, and AppleScript execution.

  • Lightweight and Open-Source

Minimal dependencies with full source code available under MIT license. Easy setup and deployment.

  • Smart Context Awareness

Automatically detects application state (Launchpa

Read from source at commit 7d585a4c8b16OBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (pypi)
claude mcp add macos-mcp -- None macos-mcp==0.4.6
03

Trust audit

CAUTIONgrade B · trust 81/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (3 observation(s))
Network
declared (6 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
found

Findings (18)

MEDIUMInventory / provenance · inv.binary · CWE-1104
.DS_Store
.DS_Store
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
bridge/mcp-stdio-bridge
mcp-stdio-bridge
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
src/.DS_Store
.DS_Store
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
bridge/MCPStdioBridge.swift:15
let defaultURL = "http://127.0.0.1:8765/mcp"
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
src/macos_mcp/infrastructure/analytics.py:44
API_KEY = "phc_uxdCItyVTjXNU0sMPr97dq3tcz39scQNt3qjTYw5vLV"
LOWInventory / provenance · inv.hidden_file · CWE-1104
.DS_Store
.DS_Store
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.mcpbignore
.mcpbignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
src/.DS_Store
.DS_Store
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
.pi/extensions/macos-mcp/index.ts:1
export { default } from "../../../extensions/macos-mcp.ts";
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
extensions/macos-mcp.ts:38
resolve(here, "../../.."),
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:174
"http://127.0.0.1:8000/mcp",
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:208
"http://127.0.0.1:8000/mcp",
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
bridge/README.md:52
"args": ["--url", "http://127.0.0.1:8765/mcp"]
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
bridge/README.md:66
"--url", "http://127.0.0.1:8765/mcp"]
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
CHANGELOG.md:35
- A native stdio-to-HTTP bridge, in Swift and in Python, replacing `npx mcp-remote`. Claude Desktop's config only accepts stdio MCP servers, so reaching a running HTTP server needs a bridge, and mcp-r
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
CONTRIBUTING.md:11
- **UV Package Manager**: Install with `curl -LsSf https://astral.sh/uv/install.sh | sh` or `pip install uv`
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
README.md:53
- **UV Package Manager**: Install with `pip install uv` or `curl -LsSf https://astral.sh/uv/install.sh | sh`

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 7d585a4c8b16full audit observations/trust-audit/mcp-server/cursortouch__macos-1.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-077d585a4c8b16CAUTIONB81first audit
05

Questions

What is the MacOS MCP server?

Lightweight MCP server for computer use in MacOS

Is MacOS safe to connect to an agent?

With care. The audit graded it B (81/100) and found 18 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does MacOS need?

No credential environment variables were found in its source, so it appears to need none.

How does MacOS run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as macos-mcp-pi-extension at 0.4.6.

How current is this page?

The grade is for one exact copy of the source (7d585a4c8b16), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement