// SCAN REPORT

Mac

44 tools. 27 can modify or destroy data without limits.

27 write tools that can modify data. Rate limits recommended.

Last updated: 3 Jul 2026

27 can modify or destroy data

17 read-only

44 tools total

Community server · catalogue entry verified 03/07/2026

How to control Mac ↓

TOOL MAP

What Mac exposes to your agents

Read (17) Write / Execute (27) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Mac tools

Execute · High launch_app Launching arbitrary applications is an Execute-category action because it triggers external operations with unpredictable side effects. Execute · Medium activate_app This tool triggers an external operation on macOS by activating and foregrounding an application process. Execute · High click Simulating mouse clicks at arbitrary coordinates is an Execute action — it triggers UI interactions whose effects depend entirely on what is at those coordinates (could open files, submit forms, delete items, etc.). Execute · High click_menu_item Clicking a menu item triggers application actions that can have wide-ranging effects depending on which menu item is selected — from opening files to deleting data, quitting apps, or executing arbitrary application comma

27 of Mac's 44 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mac

PolicyLayer is an MCP gateway — it sits between your AI agents and Mac, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "resize_window": {
    "limits": [
      {
        "counter": "resize_window_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_battery_status": {
    "limits": [
      {
        "counter": "get_battery_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mac — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MAC →

Instant setup, no code required.

FULL CATALOGUE

All 44 Mac tools

EXECUTE 23 tools

Execute activate_app Brings an application to the foreground Execute click Performs a mouse click at specified coordinates. Supports left, right, middle buttons and modifier keys Execute click_menu_item Clicks a menu item by path (e.g., Execute click_status_bar_item Clicks a status bar item to open its menu Execute click_status_bar_menu_item Clicks a menu item within a status bar menu Execute click_ui_element Clicks a UI element by path (e.g., Execute double_click Performs a double-click at specified coordinates Execute drag Performs a drag operation from start to end coordinates Execute focus_ui_element Sets keyboard focus to a UI element Execute focus_window Brings a specific window to the front by app name and optional window index Execute key_combination Presses a focused-app or menu key combination with modifiers; OS-global hotkeys such as Electron globalShortcu Execute launch_app Launches an application by name (e.g., Execute minimize_window Minimizes a window to the Dock Execute move_mouse Moves the mouse cursor to specified coordinates without clicking Execute move_window Moves a window to specified x, y coordinates Execute press_key Presses a key by name (Enter, Tab, Escape, F1-F12, Arrow keys, etc.) Execute quit_app Gracefully quits an application by name Execute reveal_in_finder Opens Finder and selects the specified file or folder Execute scroll Scrolls in a specified direction (up, down, left, right) at optional coordinates Execute scroll_to_element Scrolls until a UI element with specified text or role becomes visible Execute send_notification Displays a macOS notification with title, optional message, subtitle, and sound Execute set_volume Sets the system volume to a specified percentage (0-100) Execute type_text Types text at the current cursor position with optional delay between characters

WRITE 4 tools

Write resize_window Resizes a window to specified width and height Write set_clipboard Sets clipboard to specified text content Write set_mute Mutes or unmutes system audio Write set_ui_element_value Sets the value of an editable UI element (text fields, sliders, etc.)

READ 17 tools

Read get_battery_status Gets battery percentage and charging status (MacBooks only, returns isDesktop: true for desktop Macs) Read get_clipboard Reads current clipboard content (text, image paths, or file paths) Read get_display_info Lists connected displays with name, resolution, and main display indicator Read get_finder_window_path Gets the path of the frontmost Finder window Read get_menu_bar_structure Gets the complete menu bar hierarchy for a process by PID Read get_menu_item_state Gets the enabled/checked state of a menu item Read get_mute_status Checks if system audio is currently muted Read get_selected_files Gets paths of files currently selected in Finder Read get_system_info Retrieves macOS system information including version, hardware model, processor, and memory Read get_ui_element_value Gets the value of a UI element (text field content, checkbox state, etc.) Read get_ui_elements Retrieves the UI element tree for an application. Use maxDepth to limit tree depth Read get_volume Gets the current system volume as a percentage (0-100) Read list_menu_items Gets the menu hierarchy for an application Read list_running_apps Lists all running GUI applications with name, bundle ID, and process ID Read list_status_bar_items Lists visible status bar (menu bar extras) items Read list_windows Lists all visible windows with app name, title, position, and size. Optional: filter by app name Read take_screenshot Captures a screenshot of the screen, display, window, or region. Auto-resized to max 1600px and compressed to

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Mac

How do I prevent bulk modifications through Mac? +

The Mac server has 4 write tools including resize_window, set_clipboard, set_mute. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mac.

How many tools does the Mac MCP server expose? +

44 tools across 3 categories: Execute, Read, Write. 17 are read-only. 27 can modify, create, or delete data.

How do I enforce a policy on Mac? +

Register the Mac MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mac tool call.

Deterministic rules across all 44 Mac tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MAC →

Instant setup, no code required.

44 Mac tools catalogued and risk-classified — across an index of 43,000+ MCP servers.