Apple NotifierSAFE
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mseep.ai/app/turlockmike-apple-notifier-mcp)
[](https://smithery.ai/server/apple-notifier-mcp) Send native macOS notifications and interact with system dialogs through any MCP-compatible client like Claude Desktop or Cline.
Prerequisites
- macOS
- Node.js >= 18
- An MCP-compatible client (Claude Desktop, Cline)
Troubleshooting: Notifications Not Appearing
For notifications to display, the terminal or application running the MCP server needs notification permissions in macOS.
Grant Notification Permissions
- For Claude Desktop users:
- Open System Preferences (or System Settings on macOS Ventura+)
- Go to Notifications
- Find Node or terminal-notifier (whichever appears)
- Enable Allow Notifications
- Set alert style to Banners or Alerts
- For Claude Code / Terminal users:
- Open System Preferences > Notifications
- Find Terminal (or iTerm if using iTerm2)
- Enable Allow Notifications
- If the app doesn't appear in Notifications settings:
- Run a test notification manually in Terminal:
osascript -e 'display notification "Test" with title "Hello"'
- This should trigger macOS to prompt for or register notification permissions
- Then check System Preferences again
- Check Focus Mode / Do Not Disturb:
- Ensure Focus Mode or Do Not Disturb is not enabled
- Check the Control Center in the menu bar
Verify Notifications Work
Test from terminal before using via MCP:
osascript -e 'display notification "Test message" with title "Test tit
dd2720473dedOBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add apple-notifier-mcp -- npx -y [email protected]
{
"mcpServers": {
"apple-notifier-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (7)
6 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
prompt_user | read | Display a dialog prompt to get user input |
select_file | read | Open native file picker dialog |
select_fileEval | read | Evaluates the behavior of the select_file tool by verifying its ability to open a file dialog with specified parameters |
send_notification | write | Send a notification on macOS using osascript |
speak | read | Speak text using macOS text-to-speech |
speakEval | read | Evaluates the macOS text-to-speech speak tool |
take_screenshot | read | Evaluates the take_screenshot tool functionality |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
@modelcontextprotocol/sdk, mcp-evals, @types/node, typescript
The evals package loads an mcp client that then runs the index.ts file, so there is no need to rebuild between tests. You can load environment variables by prefixing the npx command. Full documentatio
Gates applied: no_behavioural_pass.
dd2720473dedfull audit observations/trust-audit/mcp-server/turlockmike__apple-notifier.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | dd2720473ded | SAFE | B | 89 | first audit |
Questions
What tools does Apple Notifier expose?
7 in total: 6 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Apple Notifier safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Apple Notifier need?
No credential environment variables were found in its source, so it appears to need none.
How does Apple Notifier run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as apple-notifier-mcp at 1.1.0.
How current is this page?
The grade is for one exact copy of the source (dd2720473ded), read on 2026-10-09. The repository is watched and re-audited when it changes.