Mcp-mac-control MCP Server

Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.

Local serverstdio

What is the Mcp-mac-control MCP Server?

Mcp-mac-control is an MCP integration. Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.

Packages and local setup

The published npm package is @dockndevai/mcp-mac-control, version 0.3.1. Its declared MCP transport is stdio.

The package declares MACCTL_SAFE_MODE: Set true to invert to safe-by-default: read-only, all powers gated, confirmations on. Default false (full control).; MACCTL_MODE: Access mode: read-only | read-write | admin. Defaults to admin (or read-only in safe mode).; MACCTL_CONFIRM: Set true to require human approval (via MCP elicitation) on destructive ops. Default off in full control.; MACCTL_PATH_ALLOWLIST: Comma-separated path roots the agent may touch (empty = anywhere).; MACCTL_PROTECTED_PATHS: Comma-separated path roots that may be read but never modified/deleted (empty by default in full control)..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 0.3.1 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
MACCTL_SAFE_MODESet true to invert to safe-by-default: read-only, all powers gated, confirmations on. Default false (full control).Optional
MACCTL_MODEAccess mode: read-only | read-write | admin. Defaults to admin (or read-only in safe mode).Optional
MACCTL_CONFIRMSet true to require human approval (via MCP elicitation) on destructive ops. Default off in full control.Optional
MACCTL_PATH_ALLOWLISTComma-separated path roots the agent may touch (empty = anywhere).Optional
MACCTL_PROTECTED_PATHSComma-separated path roots that may be read but never modified/deleted (empty by default in full control).Optional