Mac Control MCP Server

by dockndevaiio.github.dockndevai/mcp-mac-controlv0.3.1

Full Mac control: shell, AppleScript, files, processes and human-like GUI input with a screenshot loop, plus an optional safe mode with read-only, gated access.

0Node.jsstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active13d ago

Install Mac Control MCP server

claude mcp add mac-control -- npx -y @dockndevai/mcp-mac-control

{
  "mcpServers": {
    "mac-control": {
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/mcp-mac-control"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "mac-control": {
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/mcp-mac-control"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "mac-control": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/mcp-mac-control"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "mac-control": {
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/mcp-mac-control"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
MACCTL_SAFE_MODE	—	—	Set true to invert to safe-by-default: read-only, all powers gated, confirmations on. Default false (full control).
MACCTL_MODE	—	—	Access mode: read-only \| read-write \| admin. Defaults to admin (or read-only in safe mode).
MACCTL_CONFIRM	—	—	Set true to require human approval (via MCP elicitation) on destructive ops. Default off in full control.
MACCTL_PATH_ALLOWLIST	—	—	Comma-separated path roots the agent may touch (empty = anywhere).
MACCTL_PROTECTED_PATHS	—	—	Comma-separated path roots that may be read but never modified/deleted (empty by default in full control).