// SCAN REPORT

macOS Control MCP Server

20 tools. 14 can modify or destroy data without limits.

14 write tools that can modify data. Rate limits recommended.

Last updated: 28 Jun 2026

14 can modify or destroy data

6 read-only

20 tools total

Community server · catalogue entry verified 28/06/2026

How to control macOS Control MCP Server ↓

TOOL MAP

What macOS Control MCP Server exposes to your agents

Read (6) Write / Execute (14) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous macOS Control MCP Server tools

Execute · High click_mouse A click_mouse tool on a full desktop automation platform can trigger arbitrary UI actions — opening applications, confirming dialogs, clicking destructive buttons — making it an Execute-category tool with high severity. Execute · High double_click Double-clicking executes UI actions that can open applications, confirm dialogs, activate controls, or trigger arbitrary system operations. Execute · High drag_mouse The drag_mouse tool performs a mouse drag action, which is a desktop automation operation. Execute · High hotkey A hotkey tool on a desktop automation server triggers keyboard shortcuts that can execute arbitrary system-level actions (e.g., Cmd+Q to quit apps, Cmd+Space to open Spotlight, etc.).

14 of macOS Control MCP Server's 20 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control macOS Control MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and macOS Control MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "get_mouse_position": {
    "limits": [
      {
        "counter": "get_mouse_position_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register macOS Control MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MACOS CONTROL →

Instant setup, no code required.

FULL CATALOGUE

All 20 macOS Control MCP Server tools

EXECUTE 14 tools

Execute click_mouse click_mouse Execute double_click Double-click at current position or specified coordinates. Execute drag_mouse drag_mouse Execute hotkey hotkey Execute key_down Hold down a key (must call key_up to release). Execute key_up Release a held key. Execute move_mouse Move the mouse cursor to specific coordinates. Execute press_key Press a specific key or key combination. Execute right_click Right-click at current position or specified coordinates. Execute scroll_mouse Scroll the mouse wheel. Execute set_failsafe Enable or disable PyAutoGUI failsafe (move mouse to corner to abort). Execute set_pause Set the pause duration between PyAutoGUI actions. Execute sleep Pause execution for a specified duration. Execute type_text Type text as if typing on the keyboard.

READ 6 tools

Read get_mouse_position Get the current mouse cursor position. Read get_pixel_color Get the RGB color of a pixel at specific coordinates. Read get_screen_size Get the current screen resolution. Always run this tool first. Read get_version Get version information for the MCP server and its tools. Read locate_on_screen Locate an image on the screen and return its position. Read take_screenshot take_screenshot

FAQ

Questions about macOS Control MCP Server

Is the macOS Control MCP Server MCP server safe to use without restrictions? +

The macOS Control MCP Server server is primarily read-only with 6 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the macOS Control MCP Server MCP server expose? +

20 tools across 2 categories: Read, Write. 6 are read-only. 14 can modify, create, or delete data.

How do I enforce a policy on macOS Control MCP Server? +

Register the macOS Control MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every macOS Control MCP Server tool call.

Deterministic rules across all 20 macOS Control MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MACOS CONTROL →

Instant setup, no code required.

20 macOS Control MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.