MCP.Market

iCloud MCP server

by MrGo2·io.github.MrGo2/icloud-mcp·v2.2.2·74 stars
No reviews yet

Apple Mail, Calendar, Contacts, Reminders, Notes, Messages and Safari via AppleScript or iCloud

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Established

74 stars1.1k downloads/wk

Reviews

Write one

Nobody has reviewed iCloud MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

iCloud MCP tools (26, 13 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • about

    Returns information about this iCloud MCP server

  • check-auth-status

    Check if iCloud credentials are configured correctly

  • close-safari-tab

    Closes a Safari tab

  • complete-reminder

    Marks a reminder as complete or incomplete (LOCAL mode only)

  • create-contactwrite action

    Creates a contact in the user's address book (Contacts.app in local mode, iCloud over CardDAV in cloud mode). Every field is optional, so pass at least a name (displayName, or firstName and lastName) along with any known email, phone, organization, job title or notes.

  • create-eventwrite action

    Creates a new calendar event

  • create-notewrite action

    Creates a new note

  • create-reminderwrite action

    Creates a new reminder (LOCAL mode only)

  • delete-contactwrite action

    Permanently deletes a contact from the user's address book. Takes the handle returned by list-contacts or search-contacts; there is no undo through this server.

  • delete-eventwrite action

    Deletes a calendar event. In local mode, every occurrence of a recurring event shares the series UID, so this acts on the whole series, not one occurrence.

  • delete-reminderwrite action

    Deletes a reminder (LOCAL mode only)

  • get-current-safari-url

    Gets the URL and title of the current/active Safari tab

  • mark-as-read

    Marks an email as read or unread

  • open-safari-url

    Opens a URL in Safari (new tab or new window)

  • react-messagewrite action

    Send a tapback reaction (love, like, dislike, laugh, emphasis, question)

  • read-contact

    Get detailed information about a specific contact

  • read-emailwrite action

    Reads the full content of an email by UID

  • read-messages

    Read message history for a specific iMessage/SMS conversation

  • read-note

    Reads the content of a specific note

  • search-notes

    Search notes by text in title or content

  • search-reminders

    Search reminders by text in name or body (LOCAL mode only)

  • send-emailwrite action

    Sends an email immediately from the user's account to one or more comma-separated recipients, with optional CC, BCC and HTML body. Cloud mode delivers over SMTP and returns the new message ID; local mode sends through Mail.app, which only sends plain text and returns no ID. There is no draft step, so the message goes out as soon as the tool runs.

  • send-messagewrite action

    Sends an iMessage or SMS to a phone number or email handle, with an optional file attachment. The message is delivered as soon as the tool runs; there is no draft step and no recall.

  • set-mode

    Switch between LOCAL (AppleScript/macOS apps) and CLOUD (iCloud protocols) modes

  • update-eventwrite action

    Updates an existing calendar event. Only the fields you pass are changed. In cloud mode the CalDAV property-merge preserves recurrence, invitees and alarms (experimental: the live round-trip is not yet verified). In local mode, every occurrence of a recurring event shares the series UID, so this acts on the whole series, not one occurrence.

  • update-reminderwrite action

    Updates an existing reminder (LOCAL mode only)

Public scan report

scanner v0.1.10 · 2026-11-04 · same rubric, same numbers if you re-run it

no findings
  • Code scan27 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How iCloud MCP compares

Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 60% of 1,293 Productivity servers
Tools
26
the typical Productivity server has 7
Tools that change things
50%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
74
more than 91% of 858 Productivity servers
Downloads a week
1,071
more than 92% of 488 Productivity servers with a package

What its tools let an agent do: 9 read · 5 create · 7 change · 3 delete · 2 send or post

Release history: 3 versions in the registry since 2026-08-11, latest 2026-11-04, typically one every 84 days.

Install iCloud MCP in Claude Code, Cursor or VS Code

Runs npx -y mcp-icloud on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add icloud-mcp -- npx -y mcp-icloud
Add to Cursor

What the publisher says

From the iCloud MCP repository's README, as published. We do not edit it. Read it on GitHub

icloud-mcp covers seven Apple services with two interchangeable backends, and as far as we know it is the only MCP server that does. In local mode it drives the native macOS apps through AppleScript: no credentials, no network, and it reaches the services the iCloud protocols do not expose (Reminders, Notes, Messages, Safari). In cloud mode it speaks IMAP/SMTP, CalDAV and CardDAV instead, so it runs on any machine, not just a Mac. The set-mode tool switches between the two at runtime, without a restart.

Features

The server exposes 41 tools across Email, Calendar, Contacts, Reminders, Notes, Messages and Safari. Each tool carries a typed schema, a human title and behavioural annotations, and every list-* tool returns machine-readable structuredContent alongside its text output. Local mode needs no passwords at all; macOS Automation permissions take their place.

Access and security model

The server speaks JSON-RPC over stdin/stdout only. It opens no ports and listens on no socket.

Credentials are never logged. ICLOUDAPPPASSWORD is read once at startup and handed only to the IMAP/SMTP/CalDAV/CardDAV clients; diagnostics print a fixed mask, never the value. Where you keep the password is up to you: a .env file beside the module for a manual install, or the .mcpb bundle's sensitive field, which the host stores in the macOS Keychain. Local mode has no password anywhere, since macOS gates access per app through its own Automation prompts, and you can revoke those at any time.

Every tool argument is validated against a zod schema before the handler runs. Arguments are also coerced at each AppleScript interpolation site, so a value that is not a number cannot reach a script template.

Privacy Policy

The server collects nothing and keeps nothing: no telemetry, no analytics, no state on disk. Your data moves only between your machine, the AI client you connect and Apple's services. The full policy, covering collection, storage, third-party sharing, retention and contact, is in PRIVACY.md.

Tools

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

iCloud MCP: common questions

Is iCloud MCP server safe?
Mostly: it is graded B (83/100). Read the iCloud MCP safety report
How do I install iCloud MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does iCloud MCP need an API key?
Yes. The registry entry asks for ICLOUD_APP_PASSWORD.
Is iCloud MCP maintained?
The last commit was 12 days ago (2026-11-04). The latest release is v2.2.2.
What can I use instead of iCloud MCP?
Servers from other publishers that do the same job: AIquila — Nextcloud MCP Server, Mu MCP server and Apple Tools (Unified) MCP server. Compare all iCloud MCP alternatives.
How does iCloud MCP compare with other Productivity MCP servers?
safety score 83/100 (higher than 60% of 1,293 Productivity servers); tools 26 (the typical Productivity server has 7); tools that change things 50% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to iCloud MCP

Same job from other publishers: the closest match first, then the best rated.

All iCloud MCP alternatives →
iCloud MCP vs AIquila — Nextcloud MCP ServeriCloud MCP vs MuiCloud MCP vs Apple Tools (Unified)