Apple Shortcuts MCP
Runs Apple Shortcuts automations on macOS so agents can trigger any user-built workflow through the Shortcuts app.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-18
This community MCP server enables AI agents to execute arbitrary Apple Shortcuts on macOS, which represents significant desktop automation capability. The maintainer 'recursechat' appears to be a solo developer with limited public profile and sparse repository activity. Whilst the package is distributed via npm with standard installation, the permission model is inherently broad: any Shortcut can perform filesystem operations, network requests, application control, or system commands depending on user configuration. The server acts as a bridge to macOS automation without sandboxing, meaning trust depends entirely on which Shortcuts the user has created. The code is open source with basic documentation, but the security model relies on users understanding that granting this access means agents can trigger any automation they've built. No known incidents, but the attack surface is substantial if Shortcuts contain sensitive operations.
Green flags
- Open source code available for inspection on GitHub
- Standard npm distribution with straightforward installation
- No environment secrets required for basic operation
- Leverages Apple's native Shortcuts security model
Red flags
- Executes arbitrary user-defined Shortcuts with no sandboxing or scope limits
- Solo maintainer with limited public track record and sparse activity
- Permission scope entirely dependent on user's Shortcut configurations
- Can trigger any macOS automation including shell scripts and app control
Permissions requested
Install
npx -y mcp-server-apple-shortcuts
Review
Install this if you're a macOS user with a library of Shortcuts you actually use. It's a no-config bridge that works immediately. Skip it if you don't already live in Shortcuts or if you prefer writing scripts from scratch.
Good at
- Zero configuration. It scans your Shortcuts library and makes everything available immediately.
- Lets you reuse existing automations without rewriting them as MCP tools or scripts.
- Works with any Shortcut, so you can trigger system actions, file operations, or multi-app workflows.
- Installation is a single npx command with no environment variables or credentials.
Watch out
- macOS-only. No cross-platform support.
- Shortcuts that require user input or take a long time will block Claude until they finish.
- No input validation, so malformed calls fail silently or throw cryptic Shortcuts errors.
- Relies on the Shortcuts app, which can be finicky with permissions and app integrations.
Use cases
- macOS workflow triggers
- automation glue
- file conversion shortcuts
- system actions
Getting started
Works with
Similar MCPs
- Bazi MCPPerforms Chinese Bazi astrology calculations for birth chart analysis and metaphysics queries.
- TeslaMate MCPQueries your TeslaMate PostgreSQL database with 18 predefined analytics tools for battery, charging, and driving data.
- MCP StockfishBridges AI systems to the Stockfish chess engine with concurrent sessions and full UCI command support.
- Free Will MCPExperimental tools that let an AI give itself prompts, ignore user requests, or go to sleep, for studying autonomy.