# Apple Files (pypi · apple-files-mcp)

Inspect and manage local files and folders inside allowed roots on macOS.

- Trust score: 69/100 (medium)
- Change this week: +7
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-17

## Components

- mcpb · `apple-files-1.0.2.mcpb`: 17/100, [markdown](https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/https-github-com-jonathanrreed-apple-mcps-releases-download-v1-0-2-apple-files-1.md), [page](https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/https-github-com-jonathanrreed-apple-mcps-releases-download-v1-0-2-apple-files-1)
- pypi · `apple-files-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/apple-files-mcp.md), [page](https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/apple-files-mcp)

## Channel facts

- Registry: `pypi`
- Package: `apple-files-mcp`
- Version: `1.0.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-17.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs setuptools.build_meta at install time, a recognised native-build step with no shell scripting around it.
  - 2 of 31 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 35/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: no license is declared.
  - Actively maintained (last published 11 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 70/100
  - 67% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 891 tokens (~33/item across 27 items; 23 tools + 4 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 37/100
  - Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### Claude

```bash
claude mcp add jonathanrreed-apple-files-mcp -- uvx apple-files-mcp
```

### Codex

```bash
codex mcp add jonathanrreed-apple-files-mcp -- uvx apple-files-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "jonathanrreed-apple-files-mcp": {
      "type": "local",
      "command": [
        "uvx",
        "apple-files-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add jonathanrreed-apple-files-mcp --command uvx --arg apple-files-mcp
```

### Hermes

```yaml
mcp_servers:
  jonathanrreed-apple-files-mcp:
    command: "uvx"
    args: ["apple-files-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "jonathanrreed-apple-files-mcp": {
      "command": "uvx",
      "args": [
        "apple-files-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-17 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-15 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-14 (score 67, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-08-11 (score 63, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-08-07 (score 62, +1)

- [functional improvement] Security disclosure: fail → pass

### 2026-08-06 (score 61, +25)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Schema quality: unverified → 67
- [functional improvement] MCP protocol: unverified → pass
- [functional] First check of Schema quality: pass
- [functional] First check of Tool coverage: 0
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: good
- [functional] First check of Tool coverage: 100

### 2026-08-05 (score 36)

First indexed and scored.

## MCP tools (23)

### `files_health` (~16 tokens)

Files Health

Report the active Apple Files MCP configuration.

Output parameters:

- `allowed_roots` (array)
- `capabilities` (array)
- `ok` (boolean)
- `safety_mode` (string)
- `server_name` (string)
- `supports` (array)
- `transport` (string)
- `version` (string)

### `files_permission_guide` (~22 tokens)

Files Permission Guide

Explain how Apple Files MCP access is scoped on this machine.

### `files_list_allowed_roots` (~21 tokens)

List Allowed Roots

List the file system roots the server may access.

Output parameters:

- `count` (integer)
- `ok` (boolean)
- `roots` (array)

### `files_list_directory` (~26 tokens)

List Directory

List files and folders inside an allowed directory path.

Input parameters:

- `path` (string, required)

Output parameters:

- `result`

### `files_search_files` (~39 tokens)

Search Files

Search file and folder names inside the allowed roots.

Input parameters:

- `base_path`
- `limit` (integer)
- `query` (string, required)

Output parameters:

- `result`

### `files_get_file_info` (~29 tokens)

Get File Info

Get metadata for a file or folder inside the allowed roots.

Input parameters:

- `path` (string, required)

Output parameters:

- `result`

### `files_read_text_file` (~37 tokens)

Read Text File

Read a UTF-8 text file inside the allowed roots.

Input parameters:

- `max_bytes` (integer)
- `path` (string, required)

Output parameters:

- `result`

### `files_recent_files` (~25 tokens)

Recent Files

List recently modified files inside the allowed roots.

Input parameters:

- `limit` (integer)

Output parameters:

- `result`

### `files_open_path` (~35 tokens)

Open Path

Open a file or folder in the default app. Requires safe_manage or full_access safety mode.

Input parameters:

- `path` (string, required)

Output parameters:

- `result`

### `files_reveal_in_finder` (~36 tokens)

Reveal In Finder

Reveal a file or folder in Finder. Requires safe_manage or full_access safety mode.

Input parameters:

- `path` (string, required)

Output parameters:

- `result`

### `files_get_tags` (~29 tokens)

Get Tags

Read Finder tags for a file or folder inside the allowed roots.

Input parameters:

- `path` (string, required)

Output parameters:

- `result`

### `files_set_tags` (~41 tokens)

Set Tags

Replace Finder tags for a file or folder. Requires safe_manage or full_access safety mode.

Input parameters:

- `path` (string, required)
- `tags` (array, required)

Output parameters:

- `result`

### `files_add_tags` (~41 tokens)

Add Tags

Add Finder tags to a file or folder. Requires safe_manage or full_access safety mode.

Input parameters:

- `path` (string, required)
- `tags` (array, required)

Output parameters:

- `result`

### `files_remove_tags` (~41 tokens)

Remove Tags

Remove Finder tags from a file or folder. Requires safe_manage or full_access safety mode.

Input parameters:

- `path` (string, required)
- `tags` (array, required)

Output parameters:

- `result`

### `files_list_recent_locations` (~33 tokens)

List Recent Locations

List recently active parent folders across the allowed roots, including iCloud-aware metadata.

Input parameters:

- `limit` (integer)

Output parameters:

- `result`

### `files_get_icloud_status` (~30 tokens)

Get iCloud Status

Report whether local iCloud Drive is available and whether it is part of the current allowed roots.

Output parameters:

- `result`

### `files_create_folder` (~24 tokens)

Create Folder

Create a folder inside the allowed roots.

Input parameters:

- `path` (string, required)

Output parameters:

- `result`

### `files_move_path` (~35 tokens)

Move Path

Move or rename a file or folder inside the allowed roots.

Input parameters:

- `destination` (string, required)
- `source` (string, required)

Output parameters:

- `result`

### `files_delete_path` (~33 tokens)

Delete Path

Delete a file or empty folder inside the allowed roots. Requires full_access safety mode.

Input parameters:

- `path` (string, required)

Output parameters:

- `result`

### `files_list_prompts` (~21 tokens)

Files List Prompts

Fallback prompt discovery tool for tool-only MCP clients.

### `files_get_prompt` (~33 tokens)

Files Get Prompt

Fallback prompt rendering tool for tool-only MCP clients.

Input parameters:

- `arguments_json`
- `name` (string, required)

### `search_tools` (~50 tokens)

Search Tools

Search this server's tool catalog by keyword, alias, or domain tag.

Input parameters:

- `domain_tags`
- `limit` (integer)
- `mode` (string)
- `query` (string, required)

### `get_tool_info` (~48 tokens)

Get Tool Info

Load the full schema, examples, and metadata for one tool from this server.

Input parameters:

- `include_examples` (boolean)
- `include_schema` (boolean)
- `name` (string, required)

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/apple-files-mcp#diagnostics

## Score history

- 2026-08-17: 69
- 2026-08-16: 68
- 2026-08-15: 68
- 2026-08-14: 67
- 2026-08-13: 63
- 2026-08-12: 63
- 2026-08-11: 63
- 2026-08-10: 62
- 2026-08-09: 62
- 2026-08-08: 62
- 2026-08-07: 62
- 2026-08-06: 61
- 2026-08-05: 36

## Links

- PyPI project: https://pypi.org/project/apple-files-mcp/
- Socket report: https://socket.dev/pypi/package/apple-files-mcp
- Repository: https://github.com/JonathanRReed/Apple-MCPs
- Changelog RSS feed: https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/apple-files-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/apple-files-mcp.json
- HTML version of this page: https://verifymcp.io/servers/jonathanrreed-apple-files-mcp/apple-files-mcp