macos-mcp

Control macOS from your AI agent — one signed binary, UI automation to fleet orchestration.

Signed & notarized by Apple. Verifies checksum and signature before installing — fails closed.

• Accessibility-first UI automation that verifies every action landed
• Screenshots, OCR and find-on-screen; native app & file control
• Safari and Xcode via Apple's own MCP servers, re-exported
• Fleets of macOS VMs: golden images, leases, ephemeral clones
• Safety built in: permission profiles, confirmations, audit log

Its own report card, published nightly rather than claimed: a real agent drives a real Mac through this server and the score lands at /evals/latest.json (history). A run whose agent never started, or one that skipped tasks the machine couldn't do, is refused rather than rendered as a number.