Mac MCP 2.1.4 ships public endpoint modes, SSRF hardening and transaction undo
bulutarkan · reddit · 2026-09-17
Mac MCP, an MIT-licensed open-source local macOS control server for AI agents, released 2.1.4 with updates shaped by Reddit security feedback:
- Public endpoints as a first-class mode: local-only, managed ngrok, managed Cloudflare Tunnel, or custom HTTPS; Cloudflare token entered once via hidden stdin, stored 0600, supervised by launchd KeepAlive — no VPS or inbound ports.
- Security hardening: outbound HTTP and browser navigation hardened against SSRF/DNS rebinding (per-hop revalidation, non-global DNS rejected); file ops hardened against symlink/TOCTOU with dirfd + ONOFOLLOW.
- File transactions: journaling with atomic batches and conflict-aware undo (filetransactionundo).
- Delegated workflows: durable checkpoints with fail-closed resume; steering idempotency bound to daemon generation.
- New tooling: mac-mcp doctor (redacted support bundle) and a deterministic Computer Use conformance lab; ChatGPT path gains turn budgeting and web-throttle recovery.
The maintainer asks whether capability confinement plus irreversibility-gated approvals beats per-action popups for local execution.
More from coding & agent
- Dev burns 5B tokens a day on open models as multi-agent swarms emerge as a new scaling axis — xeophon · 2026-09-17
- 9 free Claude Skills with direct links: 8 official from Anthropic, 1 top community build — CodeByPoonam · 2026-09-17
- 9 Claude Skills worth installing: from slop-free UI design to automated webapp testing — CodeByPoonam · 2026-09-17
- AI code's security bugs are rarely bad code -- they're missing code — RyzeBlaziken · 2026-09-17
- n8n hit by CVSS 10.0 chain: unauthenticated file read to full RCE, PoC out — evilsocket · 2026-09-17
- free-claude-code: open-source proxy runs Claude Code on NVIDIA's free NIM API — anthara_ai · 2026-09-17