// SCAN REPORT

MCP Apple Reminders

58 tools. 42 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

42 can modify or destroy data

16 read-only

58 tools total

Community server · catalogue entry verified 02/07/2026

How to control MCP Apple Reminders ↓

TOOL MAP

What MCP Apple Reminders exposes to your agents

Read (16) Write / Execute (35) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous MCP Apple Reminders tools

Destructive · High bulk_delete_completed The tool performs irreversible deletion of data (completed reminders). Destructive · High delete_calendar Deleting a calendar is an irreversible operation that destroys data and cannot be undone. Destructive · High delete_group This tool permanently removes a reminder group/list by its UUID with no undo capability. Destructive · High delete_reminder This tool irreversibly deletes a reminder from the user's Apple Reminders application.

42 of MCP Apple Reminders's 58 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control MCP Apple Reminders

PolicyLayer is an MCP gateway — it sits between your AI agents and MCP Apple Reminders, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "bulk_delete_completed": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_file_attachment": {
    "limits": [
      {
        "counter": "add_file_attachment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_calendar": {
    "limits": [
      {
        "counter": "get_calendar_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register MCP Apple Reminders — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP APPLE REMINDERS →

Instant setup, no code required.

FULL CATALOGUE

All 58 MCP Apple Reminders tools

DESTRUCTIVE 6 tools

Destructive bulk_delete_completed bulk_delete_completed Destructive delete_calendar delete_calendar Destructive delete_group Delete a group by UUID. Destructive delete_reminder Permanently delete a reminder. Destructive delete_smart_list delete_smart_list Destructive delete_template Delete a template by UUID.

WRITE 35 tools

Write add_file_attachment add_file_attachment Write add_metadata add_metadata Write add_section_and_assign add_section_and_assign Write add_url_attachment add_url_attachment Write apply_template Instantiate a new list from template_id. Write assign_section assign_section Write bulk_complete bulk_complete Write bulk_move Move each reminder in reminder_ids to calendar_id. Write categorize_grocery_items categorize_grocery_items Write complete_reminder Mark a reminder as completed. Write create_calendar create_calendar Write create_group create_group Write create_reminder create_reminder Write create_smart_list create_smart_list Write create_template create_template Write move_list_to_group move_list_to_group Write move_reminder_active Move a reminder to the Claude-Active workflow list. Write move_reminder_blocked Move a reminder to the Claude-Waiting workflow list. Write move_reminder_done Move a reminder to the Claude-Done workflow list. Write move_reminder_on_deck Move a reminder to the Claude-On-Deck workflow list. Write move_reminder_to_list Move a reminder to a different calendar. Write set_alarm set_alarm Write set_early_reminder set_early_reminder Write set_list_appearance set_list_appearance Write set_list_pinned set_list_pinned Write set_location_alarm set_location_alarm Write set_parent Reassign or detach the parent of a reminder. Deferred — see description. Write set_recurrence set_recurrence Write set_smart_list_pinned Pin (true) or unpin (false) a custom smart list. Write set_urgent set_urgent Write triage_brain_dump triage_brain_dump Write uncomplete_reminder Mark a reminder as incomplete. Write update_calendar update_calendar Write update_reminder update_reminder Write update_smart_list update_smart_list

READ 16 tools

Read get_calendar get_calendar Read get_calendar_by_id get_calendar_by_id Read get_completed_in_range get_completed_in_range Read get_default_calendar get_default_calendar Read get_next_reminder Return the soonest upcoming incomplete reminder, or None if none. Read get_overdue_reminders get_overdue_reminders Read get_recently_deleted get_recently_deleted Read get_reminder get_reminder Read get_reminders get_reminders Read get_subtasks get_subtasks Read get_today_reminders get_today_reminders Read get_workflow_lists get_workflow_lists Read list_calendars list_calendars Read list_groups list_groups Read search_calendars search_calendars Read search_reminders search_reminders

OTHER 1 tools

Other bootstrap_agent_list bootstrap_agent_list

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about MCP Apple Reminders

Can an AI agent delete data through the MCP Apple Reminders MCP server? +

Yes. The MCP Apple Reminders server exposes 6 destructive tools including bulk_delete_completed, delete_calendar, delete_group. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through MCP Apple Reminders? +

The MCP Apple Reminders server has 35 write tools including add_file_attachment, add_metadata, add_section_and_assign. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach MCP Apple Reminders.

How many tools does the MCP Apple Reminders MCP server expose? +

58 tools across 3 categories: Destructive, Read, Write. 16 are read-only. 42 can modify, create, or delete data.

How do I enforce a policy on MCP Apple Reminders? +

Register the MCP Apple Reminders MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every MCP Apple Reminders tool call.

Deterministic rules across all 58 MCP Apple Reminders tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP APPLE REMINDERS →

Instant setup, no code required.

58 MCP Apple Reminders tools catalogued and risk-classified — across an index of 43,000+ MCP servers.