Atlas / MCP servers / fradser / Apple Events

Apple EventsBLOCK

Name: Apple Events
Author: fradser

mcp/fradser/apple-events

MCP server by fradser · calendar · eventkit · macos · Audited 2026-10-06

⚑ Report / re-scan Source ↗

MCP server providing native macOS integration with Apple Reminders and Calendar via EventKit

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

9 8r · 1w · 0d

Transport

stdio

License

MIT

Stars

216

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Apple Events MCP Server

[](https://x.com/FradSer)

English | 简体中文

A Model Context Protocol (MCP) server providing native integration with Apple Reminders and Calendar on macOS via the EventKit framework. Exposes reminders, lists, subtasks, and calendar events through a standardized interface with full CRUD operations.

The EventKit backend is the standalone `event` Swift CLI, vendored as a git submodule and built into bin/event during pnpm install — no separate brew install required. See docs/migration-to-event-cli.md for the v1.5.0 backend swap and the list of write fields not yet exposed by event.

Features
Prerequisites
Quick Start
Configuration
macOS Permissions
Usage Examples
Available MCP Tools
Structured Prompt Library
Development
License
Contributing

Features

Full CRUD for reminders, subtasks, reminder lists, and calendar events
Priority (high/medium/low/none), tags, and checklist subtasks with progress tracking
Multi-criteria filtering: completion, due-date range, priority, tags, full-text search, recurring, location-based
Flexible date formats (YYYY-MM-DD, YYYY-MM-DD HH:mm:ss, ISO 8601) with timezone awareness
Native macOS integration via EventKit — values configured in Reminders.app / Calendar.app round-trip through read responses
Automatic macOS permission discovery and prompting
Full Unicode support with comprehensive input validation

Prerequisites

Node.js 20 or later
macOS

Read from source at commit 985fa0521da3OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add mcp-server-apple-events --env APPLE_APP_PASSWORD=${APPLE_APP_PASSWORD} --env ICLOUD_APP_PASSWORD=${ICLOUD_APP_PASSWORD} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "mcp-server-apple-events": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "APPLE_APP_PASSWORD": "${APPLE_APP_PASSWORD}",
        "ICLOUD_APP_PASSWORD": "${ICLOUD_APP_PASSWORD}"
      }
    }
  }
}

Exposed tools (9)

8 read · 1 write · 0 destructive.

Tool	Risk	Description
`calendar_calendars`	read	Reads calendar collections
`calendar_events`	read	Manages calendar events
`daily-task-organizer`	read	Proactive daily task organization with intelligent reminder creation and optimization
`reminder-review-assistant`	read	Analyze and review existing reminders for productivity optimization
`reminders_lists`	read	Manages reminder lists
`reminders_subtasks`	read	Manages subtasks/checklists within reminders. Subtasks are stored in the notes field and visible in the native Reminders app. Use this to create checklist items for a reminder.
`reminders_tasks`	read	Manages reminder tasks
`smart-reminder-creator`	write	Intelligently create reminders with optimal scheduling and context
`weekly-planning-workflow`	read	Assign due dates to existing reminders based on your weekly planning ideas

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (8 observation(s))
Network: declared (1 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (25)

HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250

scripts/build-event.mjs:86

'       sudo softwareupdate -i "Command Line Tools for Xcode-<latest>"',

Why it matters. asks for elevated privileges

HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250

scripts/build-event.mjs:89

'       sudo xcode-select --switch /Applications/Xcode.app/Contents/Developer',

Why it matters. asks for elevated privileges

LOWInventory / provenance · inv.hidden_file · CWE-1104

.gitmodules

.gitmodules

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59

src/utils/binaryValidator.test.ts:114

const binaryPath = '/usr/local/bin/malicious';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/tools/handlers/calendarHandlers.ts:11

} from '../../types/index.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/tools/handlers/calendarHandlers.ts:12

import { calendarRepository } from '../../utils/calendarRepository.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/tools/handlers/calendarHandlers.ts:16

} from '../../utils/errorHandling.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/tools/handlers/calendarHandlers.ts:17

import { formatMultilineNotes } from '../../utils/helpers.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/tools/handlers/calendarHandlers.ts:24

} from '../../validation/schemas.js';

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

docs/plans/2026-02-27-code-review-fixes-design/bdd-specs.md:123

Given a user provides url="http://169.254.169.254/latest/meta-data/"