Apple Notes changelog

version

1.38.0 → 1.39.0

version

1.37.0 → 1.38.0

https://cupertino.mgcrea.io/llms.txt

− 1.34.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`− - Safari — 20 tools (9 always registered, 7 write-gated, 1 behind its own flag for reading 2FA−   codes, 3 behind another for reading a page's network traffic). `@mgcrea/mcp-apple-safari`.− - Desktop — 25 tools (9 always registered, 16 write-gated). Drives any app through the Accessibility+ 1.37.0 as of November 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`+ - Safari — 21 tools (9 always registered, 7 write-gated, 1 behind its own flag for reading 2FA+   codes, 3 behind another for reading a page's network traffic, 1 behind a third for reading the+   cookies of sites you list, never returning a value inline). `@mgcrea/mcp-apple-safari`.+ - Desktop — 27 tools (10 always registered, 17 write-gated). Drives any app through the Accessibility

version

1.36.2 → 1.37.0

version

1.34.0 → 1.36.2

version

1.31.0 → 1.34.0

https://cupertino.mgcrea.io/llms.txt

− > Contacts, Messages, Safari and Maps — plus the Mac's screen, sound, desktop and Simulator — and− > the signed menu-bar app that holds their permission grants once instead of handing them to every− > editor.− 1.30.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`− packages are MIT and on npm; the app carries Screen, Sound, Desktop and Simulator instead, which− have no npm package because they need permissions and frameworks only the signed app can hold.− - Mail — 22 tools (12 always registered, 10 write-gated). `@mgcrea/mcp-apple-mail`− - Messages — 9 tools (6 always registered, 2 write-gated, 1 behind its own flag for reading 2FA−   codes). `@mgcrea/mcp-apple-messages`. iMessage, SMS and RCS out of chat.db, with names resolved−   through Contacts. The only surface with no read fallback at all: every read through Messages' own− - Safari — 17 tools (8 always registered, 5 write-gated, 1 behind its own flag for reading 2FA−   website that reads what a page actually says and lets the write-gated tools click, fill and−   scroll. The write tools also open a URL and save one to the Reading List. With "Read network− The app itself hosts four more surfaces, none of them a separate npm install:− - Desktop — 24 tools (9 always registered, 15 write-gated). Drives any app through the Accessibility− - Simulator — 11 tools (4 always registered, 7 write-gated). The same idea for an iOS Simulator−   swipes and types, with no WebDriverAgent runner to keep alive.+ > Contacts, Messages, Safari and Maps — plus the Mac's screen, sound, desktop, Simulator and a+ > shell — and the signed menu-bar app that holds their permission grants once instead of handing+ > them to every editor.+ 1.34.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`+ packages are MIT and on npm; the app carries Screen, Sound, Desktop, Simulator and Shell instead,+ which have no npm package because they need permissions and frameworks only the signed app can+ hold.+ - Mail — 24 tools (12 always registered, 10 write-gated, 2 behind their own flag for watching+   incoming mail). `@mgcrea/mcp-apple-mail`+ - Messages — 11 tools (6 always registered, 2 write-gated, 1 behind its own flag for reading 2FA+   codes, 2 behind another for watching incoming messages). `@mgcrea/mcp-apple-messages`. iMessage,+   SMS and RCS out of chat.db, with names resolved through Contacts. The only surface with no read fallback at all: every read through Messages' own+ - Safari — 20 tools (9 always registered, 7 write-gated, 1 behind its own flag for reading 2FA+   website that reads what a page actually says, waits for text to appear on it, and lets the+   write-gated tools click, fill, submit forms and scroll. The write tools also open a URL, save one to the Reading List, and close the tabs an agent opened. With "Read network+ The app itself hosts five more surfaces, none of them a separate npm install:+ - Desktop — 25 tools (9 always registered, 16 write-gated). Drives any app through the Accessibility+ - Simulator — 12 tools (4 always registered, 8 write-gated). The same idea for an iOS Simulator+   swipes, types and folds a foldable, with no WebDriverAgent runner to keep alive.+ - Shell — 2 tools, off until switched on. `apple_shell_run` runs one script, in zsh, bash, python3,+   node, AppleScript or JXA, as Cupertino's own child, so it holds every grant Cupertino holds. Before+   each run a window shows the whole script and the agent's reason, and only a click by hand on Run+   once runs it. Every request leaves a line in a run record that keeps a hash of the script, never+   its text or output.

version

1.30.0 → 1.31.0

https://cupertino.mgcrea.io/llms.txt

− 1.28.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`− - Safari — 14 tools (8 always registered, 5 write-gated, 1 behind its own flag for reading 2FA−   codes). `@mgcrea/mcp-apple-safari`. History, live tabs, bookmarks and the Reading List, plus a−   bundled Safari extension you enable per website that reads what a page actually says and lets the−   write-gated tools click, fill and scroll. The write tools also open a URL and save one to the−   Reading List. There is still no `do JavaScript` tool: that verb needs a developer-menu toggle that−   is not a TCC grant and whose state cannot be read. Live tabs and page contents are the only things−   in the whole bundle that work with no Full Disk Access at all — tabs need an Automation grant, and−   page contents need the extension.+ 1.30.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`+ - Safari — 17 tools (8 always registered, 5 write-gated, 1 behind its own flag for reading 2FA+   codes, 3 behind another for reading a page's network traffic). `@mgcrea/mcp-apple-safari`.+   History, live tabs, bookmarks and the Reading List, plus a bundled Safari extension you enable per+   website that reads what a page actually says and lets the write-gated tools click, fill and+   scroll. The write tools also open a URL and save one to the Reading List. With "Read network+   traffic" on, the extension also records what an armed tab fetches (fetch and XMLHttpRequest from+   the top frame, plus console errors) and can save a file out of a response, such as a PDF returned+   as base64 inside JSON; bodies are not redacted. There is still no `do JavaScript` tool: that verb+   needs a developer-menu toggle that is not a TCC grant and whose state cannot be read. Live tabs+   and page contents are the only things in the whole bundle that work with no Full Disk Access at+   all — tabs need an Automation grant, and page contents need the extension.

version

1.29.1 → 1.30.0

version

1.28.0 → 1.29.1

https://cupertino.mgcrea.io/llms.txt

− 1.26.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`− - Desktop — 22 tools (9 always registered, 13 write-gated). Drives any app through the Accessibility−   API — reads a window as named, addressable controls, and behind the write gate presses, types and−   runs a whole session (`apple_desktop_run`) before releasing control back to whoever was using the−   Mac. Scoped to the apps Cupertino brokers unless you widen it.+ 1.28.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`+ - Desktop — 24 tools (9 always registered, 15 write-gated). Drives any app through the Accessibility+   API — reads a window as named, addressable controls, and behind the write gate presses, types,+   right-clicks, drags and runs a whole session (`apple_desktop_run`) before releasing control back+   to whoever was using the Mac. Scoped to the apps Cupertino brokers unless you widen it.

version

1.27.0 → 1.28.0

version

1.26.0 → 1.27.0

https://cupertino.mgcrea.io/llms.txt

− 1.23.0 as of September 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`− - Mail — 21 tools (11 always registered, 10 write-gated). `@mgcrea/mcp-apple-mail`− - Desktop — 20 tools (8 always registered, 12 write-gated). Drives any app through the Accessibility+ 1.26.0 as of October 2026: the signed app ships from GitHub releases. The `@mgcrea/mcp-apple-*`+ - Mail — 22 tools (12 always registered, 10 write-gated). `@mgcrea/mcp-apple-mail`+ - Desktop — 22 tools (9 always registered, 13 write-gated). Drives any app through the Accessibility

version

1.25.0 → 1.26.0

version

1.24.1 → 1.25.0