Icloud Calendar MCP server

iCloud Calendar MCP Server

An MCP (Model Context Protocol) server that gives AI assistants access to iCloud Calendar via CalDAV, with security controls aligned with the OWASP MCP Top 10.

[!CAUTION]

Never use your main Apple ID password. This server requires an app-specific password which can be revoked independently without affecting your Apple ID.

Why this server

• Portable CalDAV. Runs anywhere a JVM runs. It does not depend on macOS, AppleScript, or Calendar.app.
• Durable event handles. getevents and createevent return an opaque handle that references an event across sessions and process restarts, so editing or deleting one needs no re-listing.
• Correct recurrence. A series expands into one result per occurrence in the range, and you can edit or delete a single occurrence, this-and-future, or the whole series.
• Bounded responses. Date-span and event-count caps return a clear, structured error instead of a silently truncated response.
• Security aligned with the OWASP MCP Top 10, backed by a dedicated test suite.
• Published on the MCP Registry, npm, and PyPI.

Features

MCP Tools

MCP Resources

MCP Prompts

User-initiated templates that guide Claude through a multi-step task:

Security Features

• Credential Protection - Environment variables only, never in code or config
• Input Validation - All parameters validated with SSRF protection
• Rate Limiting - 60 reads/min, 20 writes/min per MCP specification
• Secure Error Handling - No sensitive data leakage in error messages
• OWASP MCP Top 10 Compliance - 282 security tests covering all major risks
• ReDoS Protection - All regex patterns tested against catastrophic backtracking
• Unicode Security - Protection against homoglyph and encoding attacks

Quick Start

Prerequisites

• Java 21+ (for all installation methods)
• iCloud account with app-specific password

Installation

Choose your preferred installation method:

Shortened. The full README is on GitHub.