Osa Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Osa Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Give your AI access to every scriptable app on your Mac.
osa-mcp is an MCP server that automatically discovers all scriptable macOS apps (Mail, Calendar, Finder, Music, Notes, Safari, &c.) and generates tools for them. No configuration, no hardcoded app list. Just connect and go.
claude mcp add my-mac -- npx -y osa-mcpclaude mcp add my-mac -- bunx osa-mcpbrew install MayCXC/osa-mcp/osa-mcp
claude mcp add my-mac -- osa-mcpIf your AI runs on a different machine, connect to your Mac over SSH. Enable Remote Login in System Settings > General > Sharing first.
claude mcp add my-mac -- npx -y osa-mcp --ssh [email protected]All of the above can also be added to your MCP settings file directly:
{
"mcpServers": {
"my-mac": {
"type": "stdio",
"command": "npx",
"args": ["-y", "osa-mcp"]
}
}
}For SSH, add "--ssh", "[email protected]" to the args.
On a typical Mac, osa-mcp generates ~700 tools in ~4 seconds. Every tool includes descriptions pulled from the app's scripting dictionary, so your AI knows what each tool does, what parameters it takes, and what values they accept.
Commands let your AI perform actions:
mail_send, mail_reply, mail_forwardfinder_reveal, finder_move, finder_duplicatemusic_play, music_pause, music_searchcalendar_show, reminders_show, notes_showsafari_do_javascript, safari_search_the_webmessages_send, terminal_do_scriptLists and gets let your AI read data:
mail_list_messages, mail_get_messagecalendar_list_events, calendar_list_calendarsfinder_list_files, finder_list_disksnotes_list_notes, reminders_list_reminderssafari_list_tabs, safari_list_documentsApplication properties expose app settings:
mail_get_application returns inbox, fetch interval, primary email, etc.finder_get_application returns desktop, trash, home, startup disk, etc.music_get_application returns current track, player state, etc.Execute runs arbitrary AppleScript or JXA for anything the generated tools don't cover.
Many tools accept a parent parameter for navigating into nested objects:
// List events in a specific calendar
{ "parent": ["calendars", "byName", ["Work"]] }
// List messages in the inbox
{ "parent": ["inbox"] }
// Get the first window's current tab
{ "parent": ["windows", 0] }Path steps: "key" accesses a property, 0 accesses by index, [] calls a method, ["arg"] calls with arguments.
git clone https://github.com/MayCXC/osa-mcp.git
cd osa-mcp
bun install
bun link
claude mcp add my-mac -- osa-mcpRequires Bun.
BSD 3-Clause. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.