Cupertino: Securing Apple MCP servers with a single Full Disk Access holder
olouv · reddit · 2026-08-31
The author released 'Cupertino', a security-focused solution for connecting AI agents to Apple's native data (Mail, Messages, Notes, Calendar). Instead of granting Full Disk Access (FDA) to every agent process, a single signed menu bar app holds the permission and spawns 8 MIT-licensed MCP servers.
Key Features:
- Permission Containment: Only the Cupertino app has FDA. Agents connect via MCP.
- Safety Controls: Write access is off by default and tools are hidden if disabled.
- Transparency: A window displays all tool calls in real-time.
This mitigates risks like token theft or prompt injection exposing the entire disk. The author used it to build a 'reply-as-myself' skill that analyzes email history without the agent ever holding direct FDA.
More from coding & agent
- Simon Willison: code mode is the future of tool calling, if it can be sandboxed — springrod · 2026-10-16
- Dev workflow: Astra for tedious tasks, Claude for ideas not implementation — menhguin · 2026-10-16
- Agent named 'Ilya' reportedly scores 1.1pt higher on benchmarks — daniel_mac8 · 2026-10-16
- Gemini CLI fix: substring matching inlined unrequested binary files into model context — priyanshu1976 · 2026-10-16
- Building AI agents on real healthcare claims data: the domain work that makes them work — alex_verem · 2026-10-16
- OpenAI stealth-testing mysterious internal model 'Aeon' in Codex desktop app and Dots — cedric_chee · 2026-10-16