iCloud

[Run it on this computer ›](#run-it-locally) [Host it for every device ›](#quick-start) [Claude Desktop in one click ›](#claude-desktop-in-one-click)

Ask your AI about your week, your inbox or the file you saved last spring, and it just knows.

iCloud MCP connects Claude, Codex, ChatGPT or any other MCP client to the Apple account you already live in.

It runs on your own machine, keeps your password there, and asks before anything leaves.

Just ask.

*"Find the email from my landlord about the heating and draft a polite reply."*

*"When am I free for an hour next week? Book lunch with Anna then."*

*"Move Thursday's dentist appointment to Friday, same time. Only that one."*

*"Remind me to renew my passport on the first of next month."*

*"Find my tax return PDF in iCloud Drive and tell me what I paid last year."*

*"How long does it take me to cycle to the station, if I need to be there at nine?"*

*"Catch me up on my messages from this weekend."*

*"How did I sleep this week, compared with last month?"*

Private by design.

Your password stays home.

Apple has no sign-in for these services other than an app-specific password.

It lives only on your machine or in your Mac's Keychain. Your AI never sees it.

Nothing leaves without you.

Mail your AI writes waits for your approval, or lands in your Drafts.

Invitations to other people are off. Deletes go to the Trash.

Built for mail from strangers.

Everything your AI reads is marked as someone else's words, not instructions.

Hidden characters are stripped, and phishing tricks are called out.

Tested where it counts.

Over 600 offline tests on every change, including fuzzing of every parser that reads other people's data, integration tests against real mail and calendar servers,

and hands-on runs against a live iCloud account for the quirks only Apple's servers have.

New in 0.12.

Apple Health Sleep with its stages, steps, activity and heart rate per day, from your iPhone, plus your whole history from the Health app's export. Any MCP client Claude, Codex, ChatGPT, Cursor and others. ChatGPT can sign in to a hosted server without extra settings. Clearer tool names Every tool is area_verb_noun , such as mail_send_message , so any agent picks the right one. Old names still work in TOOLS .

Fewer false alarms Mail from Outlook no longer warns about hidden text. The warning stays for hidden text that addresses an AI, and you can see what was hidden. Apple Maps Travel time by bike, car, foot or transit for a departure or arrival time, and place search. Calendar travel time can use it. Messages Read and search your iMessage and SMS history. Sending is off by default, and then waits for your approval and an allowlist.

A menu bar app See health at a glance, pause the server, restart it, change credentials and sign out any connected app. Pause One switch and every tool answers that the server is paused, without disconnecting anyone. Safer Invitation allowlists, screened subjects and names, your own classifier, and fuzzing of every parser that reads other people's data.

In 0.9 to 0.11: Maps, Messages, the menu bar app and pause, drafts and folders, calendars and contact groups, and richer Reminders. In 0.6 to 0.8: about three times faster calendars, lighter mail, an instant first call, your own rules file, replies owed, clash checks and a hardened recurrence guard. Since 0.4: bulk clean-up with undo, safe unsubscribe, exact bookings, note editing, search inside Drive files, birthdays and Shortcuts. In 0.3: the one-click Claude Desktop extension, local mode, Keychain storage, free time, RSVP and scam warnings.

Mail, Calendar and Contacts use Apple's standard protocols. Reminders, Notes, iCloud Drive, Maps, Messages and Health go through an optional helper on your Mac. It connects out, so your Mac never opens a port.

Choose how you run it.

Tested with Claude (web, desktop, phone, Claude Code and the Desktop extension) and with Codex CLI running the server locally. Any client that speaks MCP works the same way: locally it starts the server itself, and hosted it signs in with OAuth.

Run it locally

The server runs on your own computer. Your client starts it when it needs it and talks to it directly, so there is no public address, tunnel, Docker or OAuth. Apps on the web and on your phone can't reach it; for that, host it.

Claude Desktop in one click

1. Download `icloud-mcp- .mcpb` from the latest release.
2. Double-click it, or drag it onto Claude Desktop → Settings → Extensions.
3. Fill in your Apple Account email, an app-specific password (Claude Desktop keeps it in your system keychain), your name and your time zone, such as Europe/Amsterdam.

It starts approval-first: mail is saved to Drafts for you to send, and invitations to other people are off. This covers Mail, Calendar and Contacts. Reminders, Notes and iCloud Drive need the Mac helper and the manual setup below.

Manual setup (any MCP client)

1. Put your settings in a file only you can read.

mkdir -p ~/.icloud-mcp && chmod 700 ~/.icloud-mcp

cat > ~/.icloud-mcp/icloud.env <<'END' ICLOUD_USERNAME=you@icloud.com ICLOUD_DISPLAY_NAME=Your Name DEFAULT_TIMEZONE=Europe/Berlin END chmod 600 ~/.icloud-mcp/icloud.env

2. Keep the password in your Keychain (on a Mac). It asks for the app-specific password and never shows it on the command line:

uvx icloud-mcp-server --store-password

Not on a Mac? Add ICLOUD_APP_PASSWORD=xxxx-xxxx-xxxx-xxxx to the file instead. Any setting from Configuration can go in it; MCP_PUBLIC_URL and MCP_OWNER_PASSWORD are not needed.

3. Add it to your client (needs uv).

Claude Code:

claude mcp add icloud -- uvx icloud-mcp-server --local --env-file ~/.icloud-mcp/icloud.env

Codex:

codex mcp add icloud -- uvx icloud-mcp-server --local --env-file ~/.icloud-mcp/icloud.env

Claude Desktop: Settings → Developer → Edit Config, add this to claude_desktop_config.json, and restart Claude. Cursor (~/.cursor/mcp.json), VS Code, Windsurf, Gemini CLI and most other clients take the same command and args in their own MCP settings:

{

"mcpServers": { "icloud": { "command": "uvx", "args": ["icloud-mcp-server", "--local", "--env-file", "/Users/YOU/.icloud-mcp/icloud.env"] } } }

If your client can't find uvx, use its full path (which uvx). Without uv, pip install icloud-mcp-server and use icloud-mcp as the command.

[!TIP]

Fewer tools, better choices. Clients pick the right tool more reliably from a short list. Add TOOLS=essential for a core of 19: search, read and reply to mail; list events, find free time and create or update events; find contacts; the main Reminders, Notes and Drive tools; and the health check. Add exact names to it as needed, for example TOOLS=essential,mail_move_messages, or pick whole areas: TOOLS=mail, TOOLS=mail,calendar (also contacts, reminders, notes, drive, maps, imessage, health; the health check always stays).

How sending works locally. There is no approval page, so with the default SEND_REQUIRES_APPROVAL=true every message your AI sends is saved to your Drafts folder instead, and the result says so. You review it in Mail and press Send yourself. Set SEND_REQUIRES_APPROVAL=false to let it send directly; your client's own approval prompt is then the only check.

Reminders, Notes and iCloud Drive locally. Add ENABLE_REMINDERS=true (and/or ENABLE_NOTES, ENABLE_DRIVE) and a BRIDGE_TOKEN to the env file, start your client once, then [install the Ma