apple_reminders_show · Apple Reminders MCP: Risk & Policy

WHAT IT DOES

What apple_reminders_show does on Apple Reminders

AI agents invoke apple_reminders_show to trigger actions in Apple Reminders. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.

WHY IT NEEDS A POLICY

Why apple_reminders_show needs a policy

This tool triggers an external application action (opening/displaying a UI element in the Reminders app), which is an external operation rather than a pure data read. It doesn't modify data itself, but it does cause a side effect by launching/switching to a specific view in the Reminders app. Severity is low since the blast radius of misuse is minimal — it only opens a UI view.

From the tool's definition "Open a reminder in the Reminders app" and "opens and displays a specific reminder in the Reminders app UI"

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

apple_reminders_show Rate-limited

apple_reminders_show stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "apple_reminders_show": {
      "limits": [
        {
          "counter": "apple_reminders_show_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Apple Reminders, so you can run agents against it safely.

FAQ

Questions about apple_reminders_show

What does the apple_reminders_show tool do? +

Open a reminder in the Reminders app. This tool opens and displays a specific reminder in the Reminders app UI, useful for viewing in context or making manual edits. Args: - id (string, required): The reminder. It is categorised as a Execute tool in the Apple Reminders MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on apple_reminders_show? +

Register the Apple Reminders MCP server in PolicyLayer and add a rule for apple_reminders_show: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Apple Reminders. Nothing to install.

What risk level is apple_reminders_show? +

apple_reminders_show is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit apple_reminders_show? +

Yes. Add a rate_limit block to the apple_reminders_show rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block apple_reminders_show completely? +

Set action: deny in the PolicyLayer policy for apple_reminders_show. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides apple_reminders_show? +

apple_reminders_show is provided by the Apple Reminders MCP server (mggrim/apple-reminders-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.