Mac Control MCP server
Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.
0 stars339 downloads/wk
Reviews
Write oneNobody has reviewed Mac Control yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Mac Control tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-02 · same rubric, same numbers if you re-run it
- Code scan25 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How Mac Control compares
Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 89/100
- higher than 80% of 1,299 Productivity servers
- Downloads a week
- 339
- more than 78% of 427 Productivity servers with a package
Release history: 3 versions in the registry since 2026-09-17, latest 2026-09-26, typically one every 7 days.
Install Mac Control in Claude Code, Cursor or VS Code
Runs npx -y @dockndevai/mcp-mac-control on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-mac-control -- npx -y @dockndevai/mcp-mac-control
What the publisher says
From the Mac Control repository's README, as published. We do not edit it. Read it on GitHub
mcp-mac-control
A Model Context Protocol server that gives an AI agent full control of a Mac — like a person sitting at it. Shell, AppleScript, files, processes, and human-like GUI control: move, click, double/right-click, drag, scroll, type, and press key combos — with a screenshot + window/screen-size perception loop.
⚠️ This server is full-control by default. It starts in admin mode with command execution, deletes, and GUI input all enabled. That is powerful and dangerous: anything the agent reads (a web page, an email, a file) could contain a prompt injection that then runs arbitrary code on your Mac. Only connect it to an agent and content you trust. Set MACCTLSAFEMODE=true to flip the whole thing to safe-by-default. If you want safe-by-default as the baseline, use the sibling @dockndevai/mcp-macos instead.
Part of the dockndevai MCP server suite.
What it gives an agent (26 tools)
Perceive — screenshot, getscreensize, listwindows, getfrontmostapp, listapps, systeminfo, listdirectory, readfile, listprocesses, get_clipboard
Operate the desktop like a human — movemouse, click (left/right/double), drag, scroll, typetext, keypress (with ⌘/⌥/⌃/⇧), activateapp, quitapp, open, setclipboard, notify, write_file
Full power — runcommand (any program, no shell unless you ask for one), runapplescript (AppleScript/JXA — drive any scriptable app), deletepath (→ Trash), killprocess
The classic loop: screenshot → decide → click/type/drag/scroll → screenshot again.
Install
npx -y @dockndevai/mcp-mac-controlmacOS only. You'll need to grant the host app (Terminal, your IDE, Claude Desktop, …) macOS permissions the first time each capability is used:
- Screen Recording → for screenshot
- Accessibility → for GUI input (click, typetext, drag, scroll, keypress) and list_windows
- Automation → for AppleScript / app control
- Mouse control uses cliclick: brew install cliclick
Configure (Claude Code)
claude mcp add mac-control -- npx -y @dockndevai/mcp-mac-controlThat's it — it's full-control by default. To scope it down, add env flags (see below). See docs/CLIENTS.md for Claude Desktop / Cursor / Codex / VS Code / Windsurf, and .env.example for every variable.
Dialing the control up or down
Full control needs no configuration. Everything below is about restricting it:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-19restoreB → Ascore 89
Mac Control: common questions
- Is Mac Control MCP server safe?
- Yes, by our scan: it is graded A (89/100). Read the Mac Control safety report
- How do I install Mac Control?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Mac Control need an API key?
- No secret keys are declared. It reads 5 settings from the environment.
- Is Mac Control maintained?
- The last commit was 35 days ago (2026-09-30). The latest release is v0.3.1.
- What can I use instead of Mac Control?
- Servers from other publishers that do the same job: Hunch MCP server, no_human MCP server and three.ws Blender MCP server. Compare all Mac Control alternatives.
- How does Mac Control compare with other Productivity MCP servers?
- safety score 89/100 (higher than 80% of 1,299 Productivity servers); downloads a week 339 (more than 78% of 427 Productivity servers with a package). Full comparison.
Alternatives to Mac Control
Same job from other publishers: the closest match first, then the best rated.
- HunchFocus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.not reviewedGrowingA
- no_humanFile a task with your local no_human and check on it: task_add and task_status over stdio.not reviewedEstablishedB
three.ws BlenderDrive a local Blender headlessly: inspect, convert, render and script 3D files.not reviewedEstablishedB- Apple Tools (Unified)Unified Apple ecosystem MCP server for macOS: Mail, Calendar, Notes, Files, Messages, and more.not reviewedEstablishedA
iPhone UseDrive a real iPhone from a Mac: read the screen as text, tap, type, scroll, replay saved flows.not reviewedGrowingB
