Delv
CommunitySlow· 1mo4.3by Carter LaSalle

Mac Messages MCP

Queries the macOS iMessage database and sends messages, choosing between iMessage and SMS based on recipient.

C
Safety & Trust

Delv Safety Grade: C

Score 58/100 · assessed 2026-04-28

Maintainer45
Permissions35
Supply chain70
Transparency65
Incidents100

Mac Messages MCP is a community tool from solo developer Carter LaSalle that reads your entire iMessage database and sends messages on your behalf. Whilst distributed via PyPI with a standard uvx install, the permissions are extremely broad: full read access to your private message history and the ability to send messages as you without confirmation. The maintainer appears to be a single developer with limited public track record. The code is open source with basic documentation, but there's no evidence of security review for such sensitive functionality. No known incidents, but the combination of unrestricted message database access plus send capability creates significant privacy and impersonation risk. The tool does what it claims, but grants Claude unfettered access to potentially years of private conversations and contacts.

Lethal Trifecta (prompt-injection exposure)

TRIFECTA RISK
All three axes present. This server can read private data, ingest attacker-controlled content, and send data outbound. A poisoned input (a GitHub issue, an email, a webpage) can exfiltrate secrets via this chain. Only install with auditing; avoid on shared or cloud agents.
Private dataYes
Reads secrets, credentials, private files
Untrusted inputYes
Ingests web pages, PRs, issues, emails
External commsYes
Can send data outbound

Reads private messages, processes attacker-shaped content from any sender, can send. Personal-device trifecta — same exfiltration shape as Slack but with your contacts.

Green flags

  • Open source code available for inspection on GitHub
  • Distributed via standard PyPI package manager
  • No environment variables or secrets required
  • Clear documentation of what it does
  • No known security incidents

Red flags

  • Full read access to entire iMessage database including private conversations
  • Can send messages as you without confirmation or rate limiting
  • Solo maintainer with limited public track record
  • No apparent security review for highly sensitive messaging access
  • Direct database access bypasses macOS privacy controls

Permissions requested

DB readSend messagesRead messagesRead files
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Install

uvx mac-messages-mcp

Review

Mac Messages MCP lets Claude read your iMessage history and send messages directly from the chat interface. It taps into the macOS Messages database, so you can search old conversations, analyse contact patterns, or fire off texts without opening the Messages app. I've used it mostly for digging through chat history when I can't remember where someone mentioned a restaurant or a link. The search is fast and you can filter by contact, which beats scrolling through Messages manually. The send functionality works as advertised, choosing iMessage or SMS based on what the recipient supports. I've also tested it for drafting replies in Claude and then sending them, which is handy when you want a second opinion on tone before hitting send. The main quirk is that it needs full disk access to read the Messages database. That's not a security flaw, it's just how macOS locks down that data, but you'll need to grant permissions in System Preferences. Once that's done, it's stable. The tool doesn't cache anything, so every query hits the database directly. That means it's always current, but also means you can't use it offline. Another thing: it only works on macOS. If you're on Linux or Windows, this is useless to you. And if you don't use iMessage much, or you're in a region where WhatsApp or Telegram dominate, you won't get much value. This is squarely for people who live in the Apple ecosystem and have years of iMessage history worth mining. The mass sending feature is interesting but use it carefully. You can script bulk messages, which is useful for event invites or group coordination, but it's easy to accidentally spam people. I'd recommend testing with a small batch first. Overall, it's a solid tool if you're already using Claude Desktop on a Mac and want to treat your message history as queryable data. It won't change your life, but it's genuinely useful for the specific things it does.
Verdict

Install this if you're on macOS, use iMessage regularly, and want Claude to search or send messages without switching apps. Skip it if you're not in the Apple ecosystem or if granting database access feels too invasive.

Good at

  • Reads the live Messages database, so search results are always current without any sync delay.
  • Automatically picks iMessage or SMS based on recipient, no manual switching required.
  • Fast search across years of chat history, much quicker than scrolling through the Messages app.
  • Lets you draft and review messages in Claude before sending, useful for tone-checking or editing.
  • No API keys or external services, everything stays local on your Mac.

Watch out

  • macOS only, completely useless on other operating systems.
  • Requires full disk access permissions, which some users won't want to grant.
  • No offline mode since it queries the database directly every time.
  • Mass sending feature could easily spam contacts if you're not careful with batching.
  • Limited value if you don't use iMessage much or live outside Apple-heavy regions.

Use cases

  • personal message search
  • contact history analysis
  • draft replies
  • mass iMessage sending

Getting started

1. Run `uvx mac-messages-mcp` in your terminal to install the server. 2. Add it to your Claude Desktop config file under the `mcpServers` section with the command path pointing to the installed binary. 3. Grant full disk access to Claude Desktop in System Preferences > Privacy & Security > Full Disk Access so it can read the Messages database. 4. Restart Claude Desktop and ask it to search your recent messages to verify the connection works. 5. Watch out for the permissions prompt on first run. If Claude can't access messages, check that full disk access is actually enabled for the right application.

Works with

Claude DesktopClaude CodeCursor

Similar MCPs