Apple Tools (Unified)
io-github-jonathanrreed-apple-tools-mcp declares 184 capabilities across 184 tools, with 2 critical issues.
Issues
184 of 184 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.
61 tools are classified as irreversible and declare no limit.
184 of 184 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.
184 of 184 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.
19 tools can modify data and declare no limit.
104 tools can read data and declare no limit.
Declared capabilities
| Tool | Read as | Basis |
|---|---|---|
apple_get_preferences | read |
declared |
apple_detect_defaults | destructive |
declared |
apple_update_preferences | destructive |
declared |
apple_detect_digest_folder | destructive |
declared |
apple_set_digest_folder | destructive |
declared |
apple_ensure_digest_folder | write |
assumed |
apple_update_contact_preferences | destructive |
declared |
apple_prepare_communication | read |
declared |
apple_preview_communication | read |
declared |
apple_preview_archive_message | read |
declared |
apple_preview_create_reminder_with_defaults | read |
declared |
apple_preview_create_note_with_defaults | read |
declared |
apple_preview_follow_up_from_mail | read |
declared |
apple_send_communication | destructive |
declared |
apple_archive_message | destructive |
declared |
apple_list_recent_actions | read |
declared |
apple_undo_action | destructive |
declared |
apple_create_reminder_with_defaults | write |
inferred |
apple_create_note_with_defaults | write |
inferred |
apple_capture_follow_up_from_mail | send |
inferred |
apple_event_collaboration_summary | read |
declared |
apple_maps_search_places_strict | read |
declared |
apple_maps_get_directions_strict | read |
declared |
apple_find_duplicate_contacts | read |
declared |
apple_prepare_unique_contact | read |
declared |
apple_list_shortcuts_for_capability | read |
declared |
apple_route_or_run_shortcut | destructive |
declared |
apple_open_application | write |
assumed |
apple_get_focus_status | read |
declared |
apple_get_system_context | read |
declared |
apple_open_file_path | write |
assumed |
apple_reveal_in_finder | write |
assumed |
apple_tag_file | destructive |
declared |
apple_update_system_setting | destructive |
declared |
apple_control_frontmost_app | destructive |
declared |
apple_suggest_mailboxes | read |
declared |
apple_suggest_calendars | read |
declared |
apple_suggest_reminder_lists | read |
declared |
apple_suggest_shortcuts | read |
declared |
apple_suggest_contacts | read |
declared |
apple_suggest_note_folders | read |
declared |
apple_suggest_message_conversations | read |
declared |
apple_suggest_files | read |
declared |
apple_suggest_running_apps | read |
declared |
apple_suggest_places | read |
declared |
apple_permission_guide | read |
declared |
apple_recheck_permissions | read |
declared |
apple_send_message_interactive | destructive |
declared |
apple_create_event_interactive | write |
inferred |
apple_health | read |
declared |
apple_overview | read |
declared |
apple_generate_daily_briefing | read |
declared |
apple_generate_weekly_briefing | read |
declared |
apple_triage_communications_task | read |
declared |
mail_health | read |
declared |
mail_list_mailboxes | read |
declared |
mail_search_messages | read |
declared |
mail_get_message | read |
declared |
mail_get_thread | read |
declared |
mail_compose_draft | send |
inferred |
mail_reply_message | destructive |
declared |
mail_reply_latest_in_thread | destructive |
declared |
mail_forward_message | destructive |
declared |
mail_mark_message | destructive |
declared |
mail_move_message | destructive |
declared |
mail_archive_thread | destructive |
declared |
mail_delete_message | destructive |
declared |
mail_send_message | destructive |
declared |
calendar_health | read |
declared |
calendar_list_calendars | read |
declared |
calendar_list_events | read |
declared |
calendar_get_event | read |
declared |
calendar_create_event | write |
inferred |
calendar_update_event | destructive |
declared |
calendar_delete_event | destructive |
declared |
reminders_health | read |
declared |
reminders_list_lists | read |
declared |
reminders_create_list | read |
inferred |
reminders_delete_list | destructive |
declared |
reminders_list_reminders | read |
declared |
reminders_get_reminder | read |
declared |
reminders_create_reminder | write |
inferred |
reminders_update_reminder | destructive |
declared |
reminders_complete_reminder | destructive |
declared |
reminders_uncomplete_reminder | destructive |
declared |
reminders_delete_reminder | destructive |
declared |
shortcuts_health | read |
declared |
shortcuts_list_shortcuts | read |
declared |
shortcuts_list_folders | read |
declared |
shortcuts_view_shortcut | read |
declared |
shortcuts_run_shortcut | destructive |
declared |
files_health | read |
declared |
files_list_allowed_roots | read |
declared |
files_list_directory | read |
declared |
files_search_files | read |
declared |
files_get_file_info | read |
declared |
files_read_text_file | read |
declared |
files_recent_files | read |
declared |
files_get_tags | read |
declared |
files_list_recent_locations | read |
declared |
files_get_icloud_status | read |
declared |
files_create_folder | write |
inferred |
files_move_path | destructive |
declared |
files_open_path | write |
assumed |
files_reveal_in_finder | write |
assumed |
files_set_tags | destructive |
declared |
files_add_tags | write |
inferred |
files_remove_tags | destructive |
declared |
files_delete_path | destructive |
declared |
system_health | read |
declared |
system_status | read |
declared |
system_get_battery | read |
declared |
system_get_frontmost_app | read |
declared |
system_list_running_apps | read |
declared |
system_get_clipboard | read |
declared |
system_list_settings_domains | read |
declared |
system_get_appearance_settings | read |
declared |
system_get_accessibility_settings | read |
declared |
system_get_dock_settings | read |
declared |
system_get_finder_settings | read |
declared |
system_get_settings_snapshot | read |
declared |
system_get_focus_status | read |
declared |
system_get_context_snapshot | read |
declared |
system_read_preference_domain | read |
declared |
system_set_appearance_mode | destructive |
declared |
system_set_show_all_extensions | destructive |
declared |
system_set_show_hidden_files | destructive |
declared |
system_set_finder_path_bar | destructive |
declared |
system_set_finder_status_bar | destructive |
declared |
system_set_dock_autohide | destructive |
declared |
system_set_dock_show_recents | destructive |
declared |
system_set_reduce_motion | destructive |
declared |
system_set_increase_contrast | destructive |
declared |
system_set_reduce_transparency | destructive |
declared |
system_set_clipboard | destructive |
declared |
system_show_notification | read |
inferred |
system_open_application | write |
assumed |
system_gui_list_menu_bar_items | read |
inferred |
system_gui_click_menu_path | destructive |
declared |
system_gui_press_keys | destructive |
declared |
system_gui_type_text | destructive |
declared |
system_gui_click_button | destructive |
declared |
system_gui_choose_popup_value | destructive |
declared |
maps_health | read |
declared |
maps_search_places | read |
declared |
maps_get_directions | read |
declared |
maps_build_maps_link | read |
declared |
maps_open_directions_in_maps | write |
assumed |
contacts_health | read |
declared |
contacts_list_contacts | read |
declared |
contacts_create_contact | write |
inferred |
contacts_update_contact | destructive |
declared |
contacts_delete_contact | destructive |
declared |
contacts_search_contacts | read |
declared |
contacts_get_contact | read |
declared |
contacts_resolve_message_recipient | read |
declared |
notes_health | read |
declared |
notes_list_accounts | read |
declared |
notes_list_folders | read |
declared |
notes_list_notes | read |
declared |
notes_get_note | read |
declared |
notes_search_notes | read |
declared |
notes_create_note | write |
inferred |
notes_append_to_note | write |
assumed |
notes_update_note | destructive |
declared |
notes_delete_note | destructive |
declared |
notes_move_note | destructive |
declared |
notes_create_folder | write |
inferred |
notes_rename_folder | destructive |
declared |
notes_delete_folder | destructive |
declared |
notes_list_attachments | read |
declared |
messages_health | read |
declared |
messages_list_conversations | read |
declared |
messages_get_conversation | read |
declared |
messages_search_messages | read |
declared |
messages_get_message | read |
declared |
messages_list_attachments | read |
declared |
messages_send_message | destructive |
declared |
messages_reply_in_conversation | destructive |
declared |
messages_send_attachment | destructive |
declared |
apple_list_prompts | read |
declared |
apple_get_prompt | read |
declared |
search_tools | read |
declared |
get_tool_info | read |
declared |
Record history
| Recorded | Exposure | Source |
|---|---|---|
| 2026-10-15 | 100 | tools/list answered by the PyPI package apple-tools-mcp==1.1.2 (published to PyPI as apple-tools-mcp, listed in the official MCP registry as io.github.JonathanRReed/apple-tools-mcp 1.1.2), run in an isolated container with no network access and placeholder credentials |
| 2026-10-13 | 100 | tools/list answered by the PyPI package apple-tools-mcp==1.1.1 (published to PyPI as apple-tools-mcp, listed in the official MCP registry as io.github.JonathanRReed/apple-tools-mcp 1.1.1), run in an isolated container with no network access and placeholder credentials |
tools/list response and it will be re-scored and dated.
Corrections are published alongside the original, not in place of it.