macOS Ecosystem MCP Server

macOS Ecosystem MCP Server

A secure, semantic Model Context Protocol (MCP) server that provides Claude with safe access to macOS productivity applications: Reminders, Calendar, and Notes.

Why This Server?

Unlike raw AppleScript execution servers (which are dangerous due to arbitrary code execution), this server provides:

• ✅ App-specific semantic tools (e.g., reminders_add, calendar_create_event)
• ✅ Multi-layer security validation (Zod schemas + AppleScript validator)
• ✅ Template-based script generation (no string concatenation)
• ✅ Input sanitization and validation at every layer
• ✅ Clear, discoverable tool interfaces for LLMs

Features

🗓️ Reminders (4 tools)

• reminders_add - Create reminders with title, notes, due date, priority
• reminders_list - List reminders with filtering by list and completion status
• reminders_complete - Mark reminders as completed
• reminders_search - Search reminders by keyword

📅 Calendar (5 tools)

• calendar_create_event - Create events with full details (location, notes, alerts)
• calendar_list_events - List events within a date range
• calendar_find_free_time - Find available time slots for scheduling
• calendar_update_event - Modify existing events
• calendar_delete_event - Delete events

📝 Notes (3 tools)

• notes_create - Create notes with title and body (supports HTML)
• notes_append - Append content to existing notes
• notes_search - Search notes by keyword

Installation

Option 1: Binary Installation (Recommended)

No Node.js required! Download a pre-built binary from GitHub Releases:

# For Apple Silicon (M1/M2/M3/M4)
curl -L https://github.com/neverprepared/macos-ecosystem-mcp/releases/latest/download/macos-mcp-arm64 -o macos-mcp
chmod +x macos-mcp
sudo mv macos-mcp /usr/local/bin/

Note: Intel Macs can run via Rosetta 2 or install from source.

See BINARY_INSTALL.md for detailed instructions.

Option 2: Install from Source

Prerequisites:

• macOS 10.15 or later
• Node.js 18+ or Bun
• pnpm (recommended) or npm

git clone https://github.com/neverprepared/macos-ecosystem-mcp.git
cd macos-ecosystem-mcp
pnpm install
pnpm build

Configuration

Option 1: Claude Code (CLI)

If using binary installation:

Add to your global ~/.claude/mcp.json:

{
  "mcpServers": {
    "macos-ecosystem": {
      "command": "/usr/local/bin/macos-mcp"
    }
  }
}

If using source installation:

{
  "mcpServers": {
    "macos-ecosystem": {
      "command": "/absolute/path/to/macos-ecosystem-mcp/start.sh"
    }
  }
}

Verify the server is loaded:

claude mcp list
# Should show "macos-ecosystem" in the list

Option 2: Claude Desktop

Add to your ~/.config/claude/claude_desktop_config.json:

{
  "mcpServers": {
    "macos-ecosystem": {
      "command": "/Users/YOUR_USERNAME/path/to/macos-ecosystem-mcp/start.sh"
    }
  }
}

Replace YOUR_USERNAME and adjust the path to where you cloned this repository.

Environment Variables

Copy .env.example to .env and customize:

cp .env.example .env

Available options:

• LOG_LEVEL - Logging verbosity: debug, info, warn, error (default: info)
• SCRIPT_TIMEOUT - Script execution timeout in milliseconds (default: 30000)
• ENABLE_SECURITY_VALIDATION - Enable security checks (default: true)

macOS Permissions

On first use, macOS will prompt you to grant automation permissions. You need to allow this server to control:

• Reminders
• Calendar
• Notes

Navigate to: System Settings > Privacy & Security > Automation

Usage Examples

Create a Reminder

Create a reminder "Review PR #123" in my Work list, due tomorrow at 2pm, high priority

Find Free Time

Find me a 30-minute slot tomorrow between 9am and 5pm

Create a Note

Create a note titled "Meeting Notes - Q1 Planning" with the following content: [your content]

Search Reminders

Find all reminders related to "project alpha"

Development

Run Tests

pnpm test              # Run once
pnpm test:watch        # Watch mode
pnpm test:coverage     # With coverage report

Type Checking

pnpm typecheck

Development Mode

pnpm dev

Security

This server implements defense-in-depth security:

1. Input Validation - Zod schemas validate all inputs
2. Template-Based Generation - No string concatenation of user input
3. AppleScript Validator - Blocks forbidden patterns before execution
4. App Whitelist - Only approved apps can be targeted
5. Timeout Protection - Scripts cannot run indefinitely

See docs/SECURITY.md for detailed security architecture.

Architecture

• TypeScript with strict type checking
• Zod for runtime validation