// SCAN REPORT

macOS MCP Servers

41 tools. 22 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

22 can modify or destroy data

19 read-only

41 tools total

Community server · catalogue entry verified 04/07/2026

How to control macOS MCP Servers ↓

TOOL MAP

What macOS MCP Servers exposes to your agents

Read (19) Write / Execute (19) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous macOS MCP Servers tools

Destructive · High delete_contact This tool permanently removes data from the user's address book without the ability to reverse the action through normal means. Destructive · High delete_event This tool permanently removes calendar events, which cannot be undone. Destructive · High delete_note This tool permanently removes user data (notes) without the ability to undo the action. Execute · Medium start_facetime_audio_call This tool executes an action that initiates a FaceTime audio call, which is an external operation with real-world consequences.

22 of macOS MCP Servers's 41 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control macOS MCP Servers

PolicyLayer is an MCP gateway — it sits between your AI agents and macOS MCP Servers, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_contact": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_contact": {
    "limits": [
      {
        "counter": "create_contact_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check_facetime_status": {
    "limits": [
      {
        "counter": "check_facetime_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register macOS MCP Servers — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MACOS MCP SERVERS →

Instant setup, no code required.

FULL CATALOGUE

All 41 macOS MCP Servers tools

DESTRUCTIVE 3 tools

Destructive delete_contact Delete a contact from the address book Destructive delete_event Delete an event by title and date Destructive delete_note Delete a note by title

EXECUTE 10 tools

Execute end_current_call End the current FaceTime call Execute next_track Skip to the next track in Apple Music Execute play_pause Toggle play/pause in Apple Music Execute play_playlist Play a specific playlist by name Execute play_track Play a specific track by Spotify URI Execute previous_track Go to the previous track in Apple Music Execute start_facetime_audio_call Start a FaceTime audio call with a contact Execute start_facetime_call Start a FaceTime video call with a contact Execute toggle_mute Toggle mute/unmute for the current FaceTime call Execute toggle_video Toggle video on/off for the current FaceTime call

WRITE 9 tools

Write create_contact Create a new contact with the provided information Write create_event Create a new calendar event Write create_folder Create a new folder in Apple Notes Write create_note Create a new note in Apple Notes Write set_repeat Set repeat mode in Apple Music Write set_shuffle Enable or disable shuffle mode in Apple Music Write set_volume Set the volume level in Apple Music (0-100) Write update_contact Update a specific field of an existing contact Write update_note Update the content of an existing note

READ 19 tools

Read check_facetime_status Check if FaceTime is available and get current call status Read get_all_contacts Get a list of all contacts with basic information Read get_contact_details Get detailed information for a specific contact Read get_contact_groups Get a list of all contact groups Read get_current_track Get information about the currently playing track in Apple Music Read get_events Get events for a specific date range Read get_library_stats Get statistics about the Apple Music library Read get_note Get the content of a specific note by title Read get_playlists Get a list of user playlists from Apple Music Read get_recent_contacts Get recently modified or created contacts Read get_today_events Get all events for today Read get_upcoming_events Get upcoming events for the next 7 days Read list_calendars Get a list of all available calendars Read list_folders Get a list of all note folders Read list_notes Get a list of all notes Read search_contacts Search for contacts by name, email, or phone number Read search_events Search for events containing specific text Read search_notes Search for notes containing specific text Read search_tracks Search for tracks in Apple Music library

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about macOS MCP Servers

Can an AI agent delete data through the macOS MCP Servers MCP server? +

Yes. The macOS MCP Servers server exposes 3 destructive tools including delete_contact, delete_event, delete_note. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through macOS MCP Servers? +

The macOS MCP Servers server has 9 write tools including create_contact, create_event, create_folder. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach macOS MCP Servers.

How many tools does the macOS MCP Servers MCP server expose? +

41 tools across 4 categories: Destructive, Execute, Read, Write. 19 are read-only. 22 can modify, create, or delete data.

How do I enforce a policy on macOS MCP Servers? +

Register the macOS MCP Servers MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every macOS MCP Servers tool call.

Deterministic rules across all 41 macOS MCP Servers tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MACOS MCP SERVERS →

Instant setup, no code required.

41 macOS MCP Servers tools catalogued and risk-classified — across an index of 43,000+ MCP servers.