// SCAN REPORT

iMessage MCP Server

29 tools. 4 can modify or destroy data without limits.

4 write tools that can modify data. Rate limits recommended.

Last updated: 28 Jun 2026

4 can modify or destroy data

25 read-only

29 tools total

Community server · catalogue entry verified 28/06/2026

How to control iMessage MCP Server ↓

TOOL MAP

What iMessage MCP Server exposes to your agents

Read (25) Write / Execute (4) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous iMessage MCP Server tools

Write · Medium add_contact Add a new contact to the contacts list. Write · Medium migrate_rag_data One-time migration: copy old RAG collection to new unified collection. Write · Medium send_message Send an iMessage to a contact using their name. Write · Medium send_message_by_phone Send an iMessage directly to a phone number or iMessage handle,

4 of iMessage MCP Server's 29 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control iMessage MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and iMessage MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "add_contact": {
    "limits": [
      {
        "counter": "add_contact_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ask_messages": {
    "limits": [
      {
        "counter": "ask_messages_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register iMessage MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON IMESSAGE →

Instant setup, no code required.

FULL CATALOGUE

All 29 iMessage MCP Server tools

WRITE 4 tools

Write add_contact Add a new contact to the contacts list. Write migrate_rag_data One-time migration: copy old RAG collection to new unified collection. Write send_message Send an iMessage to a contact using their name. Write send_message_by_phone Send an iMessage directly to a phone number or iMessage handle,

READ 25 tools

Read ask_messages Semantic search across indexed iMessage conversations. Read detect_follow_up_needed Smart reminders - detect conversations needing follow-up. Read extract_links Extract URLs shared in conversations. Read get_all_recent_conversations Get recent messages from ALL conversations, including people not in your contacts. Read get_attachments Get attachments (photos, videos, files) from messages. Read get_conversation_analytics Get analytics about messaging patterns. Read get_conversation_for_summary Get conversation data formatted for AI summarization. Read get_group_messages Get messages from a specific group chat. Read get_message_thread Get messages in a reply thread. Read get_messages_by_phone Get messages by phone number directly, without needing contact to be configured. Read get_reactions Get reactions/tapbacks from messages. Read get_recent_messages Retrieve recent message history with a contact. Read get_scheduled_messages Get scheduled messages that are pending send. Read get_unread_messages Get unread messages that are awaiting response. Read get_voice_messages Get voice/audio messages with file paths. Read index_knowledge Index content from multiple sources for unified semantic search. Read index_messages Index messages for semantic search (RAG). Read knowledge_stats Get statistics about the unified knowledge base. Read list_contacts List all configured contacts with their phone numbers Read list_group_chats List all group chat conversations with participant information. Read list_recent_handles List all unique phone numbers and email handles from recent messages. Read rag_stats Get statistics about the indexed message database. Read search_knowledge Semantic search across all indexed sources (iMessage, SuperWhisper, Notes, Gmail, Slack, Calendar). Read search_messages Search messages by content/keyword across all conversations or filtered by contact. Read search_unknown_senders Find messages from phone numbers not in your contacts.

FAQ

Questions about iMessage MCP Server

How do I prevent bulk modifications through iMessage MCP Server? +

The iMessage MCP Server server has 4 write tools including add_contact, migrate_rag_data, send_message. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach iMessage MCP Server.

How many tools does the iMessage MCP Server MCP server expose? +

29 tools across 2 categories: Read, Write. 25 are read-only. 4 can modify, create, or delete data.

How do I enforce a policy on iMessage MCP Server? +

Register the iMessage MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every iMessage MCP Server tool call.

Deterministic rules across all 29 iMessage MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON IMESSAGE →

Instant setup, no code required.

29 iMessage MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.