Mac Messages MCP
Queries the macOS iMessage database and sends messages, choosing between iMessage and SMS based on recipient.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
Mac Messages MCP is a community tool from solo developer Carter LaSalle that reads your entire iMessage database and sends messages on your behalf. Whilst distributed via PyPI with a standard uvx install, the permissions are extremely broad: full read access to your private message history and the ability to send messages as you without confirmation. The maintainer appears to be a single developer with limited public track record. The code is open source with basic documentation, but there's no evidence of security review for such sensitive functionality. No known incidents, but the combination of unrestricted message database access plus send capability creates significant privacy and impersonation risk. The tool does what it claims, but grants Claude unfettered access to potentially years of private conversations and contacts.
Lethal Trifecta (prompt-injection exposure)
TRIFECTA RISKReads private messages, processes attacker-shaped content from any sender, can send. Personal-device trifecta — same exfiltration shape as Slack but with your contacts.
Green flags
- Open source code available for inspection on GitHub
- Distributed via standard PyPI package manager
- No environment variables or secrets required
- Clear documentation of what it does
- No known security incidents
Red flags
- Full read access to entire iMessage database including private conversations
- Can send messages as you without confirmation or rate limiting
- Solo maintainer with limited public track record
- No apparent security review for highly sensitive messaging access
- Direct database access bypasses macOS privacy controls
Permissions requested
Install
uvx mac-messages-mcp
Review
Install this if you're on macOS, use iMessage regularly, and want Claude to search or send messages without switching apps. Skip it if you're not in the Apple ecosystem or if granting database access feels too invasive.
Good at
- Reads the live Messages database, so search results are always current without any sync delay.
- Automatically picks iMessage or SMS based on recipient, no manual switching required.
- Fast search across years of chat history, much quicker than scrolling through the Messages app.
- Lets you draft and review messages in Claude before sending, useful for tone-checking or editing.
- No API keys or external services, everything stays local on your Mac.
Watch out
- macOS only, completely useless on other operating systems.
- Requires full disk access permissions, which some users won't want to grant.
- No offline mode since it queries the database directly every time.
- Mass sending feature could easily spam contacts if you're not careful with batching.
- Limited value if you don't use iMessage much or live outside Apple-heavy regions.
Use cases
- personal message search
- contact history analysis
- draft replies
- mass iMessage sending
Getting started
Works with
Similar MCPs
- Bluesky Social MCPFull Bluesky control over the atproto client, covering profiles, feeds, posts, follows, and interactions.
- TwilioSend SMS, manage phone numbers, query call logs. The standard for voice/SMS workflows from inside an agent.
- GmailRead, search, send, label Gmail messages from Claude. Note: original repo archived March 2026; community forks may be more current.
- ResendResend's official MCP for transactional email. Send, list, schedule from Claude — straightforward, fast, well-documented.