JCAppleScript MCP server
Commit Aug 29, 2026Lets AI assistants control macOS applications through AppleScript, JXA, and pre-built command shortcuts for apps like Messages, Mail, and Finder.
Also known as johnnyclem/JCAppleScript
- Stars
- 28
- Tools
- 10
- Downloads, 30 days
- —
- Latest version
- 2.0.0
- Last commit
- Aug 29, 2026
- License
- MIT
What is JCAppleScript MCP?
JCAppleScript lets AI assistants control macOS applications through AppleScript, JXA, and pre-built command shortcuts for apps like Messages, Mail, and Finder. It exposes 10 tools, such as execute_applescript, execute_jxa, tell_application.
Summary generated from the project's README
About JCAppleScript MCP server
JCAppleScript provides a bridge for AI assistants to interact with macOS applications by executing AppleScript and JavaScript for Automation. It functions as an MCP server that can be integrated into clients like Claude Desktop via a local configuration file. The system includes a core execution engine and a registry of pre-built command shortcuts for common software including Messages, Mail, Finder, Safari, and Xcode.
Developers can use the jcas-mcp executable to grant an AI the ability to manage files, compose emails, or control music playback. The server offers a security-focused configuration called safe mode, which can be enabled via the JCAS_SAFE_MODE environment variable to disable arbitrary code execution and restrict the assistant to sanitized, pre-defined commands. This makes it suitable for users who want to automate productivity tasks without exposing the system to unverified scripts.
What you can do with it
- 1Automate communication tasksAn AI assistant can send a text message to a specific contact using a pre-built command.
- 2Execute custom automation scriptsUsers can run raw AppleScript or JXA code directly through the server tools.
Written from the project's README. Every use case is checked against a quote from it.
JCAppleScript MCP tools 10
Detected from the READMEexecute_applescriptexecute_jxatell_applicationcheck_script_syntaxlist_running_applicationslist_registered_appssearch_commandsrun_app_commandpreview_app_commandget_app_commands
| execute_applescript | — | |
| execute_jxa | — | |
| tell_application | — | |
| check_script_syntax | — | |
| list_running_applications | — | |
| list_registered_apps | — | |
| search_commands | — | |
| run_app_command | — | |
| preview_app_command | — | |
| get_app_commands | — |
Configuration
JCAS_APP_MANIFESTSColon-separated list of JSON manifest files with additional community app definitions to load at startup.
JCAS_SAFE_MODESet to 1 to disable tools that execute arbitrary code (execute_applescript, execute_jxa, tell_application) and registry commands flagged dangerous.
| Name | Description | |
|---|---|---|
| JCAS_APP_MANIFESTS | Colon-separated list of JSON manifest files with additional community app definitions to load at startup. | |
| JCAS_SAFE_MODE | Set to 1 to disable tools that execute arbitrary code (execute_applescript, execute_jxa, tell_application) and registry commands flagged dangerous. |
Automated checks
Ran Nov 12, 2026Full report →Not verified yet. A server needs a score of 80, no serious finding, and enough data for us to check. How checks work · What to fix for more points
- Source repository linked and reachablePass
- Open source license (OSI)Pass
- Commit or release in the last yearPass
- Package name not close to a popular packageNot checked
- Remote endpoint uses HTTPSNot checked
- Destructive tools are labelledNot checked
- No hidden instructions to the modelPass
- No critical advisory in the package or its dependenciesNot checked
README
View on GitHubJCAppleScript
A Swift package for executing AppleScript from macOS applications, featuring a built-in MCP server that lets AI assistants control macOS apps through pre-built command shortcuts.
Overview
JCAppleScript provides three components:
- JCAppleScript (library) - Core AppleScript execution engine
- AppShortcuts (library) - Registry of pre-built AppleScript commands for popular macOS apps
- jcas-mcp (executable) - MCP (Model Context Protocol) server for AI-driven app automation
Installation
Swift Package Manager
Add JCAppleScript to your Package.swift:
dependencies: [
.package(url: "https://github.com/johnnyclem/JCAppleScript.git", from: "2.0.0")
]
Then add the targets you need:
.target(
name: "YourTarget",
dependencies: [
"JCAppleScript", // Core engine only
"AppShortcuts", // App command registry
]
)
Quick Start
Using the Core Engine
import JCAppleScript
let engine = AppleScriptEngine.shared
// Execute raw AppleScript
let result = try engine.execute("""
tell application "Finder"
display dialog "Hello from Swift!"
end tell
""")
// Send a command to an application
let output = try engine.tell(application: "Music", command: "play")
// Execute a script file with variable substitution
let fileResult = try engine.executeFile(at: "/path/to/script.scpt", variables: ["Alice", "Hello!"])
// Execute JavaScript for Automation (JXA)
let jxa = try engine.execute("Application('Music').play()", language: .javaScript)
// Check syntax without executing
try engine.checkSyntax("tell application \"Finder\" to activate")
// All execution APIs also have async variants
let asyncResult = try await engine.execute("return 40 + 2")
When embedding untrusted values in script source, escape them first:
let userInput = "…"
let script = "display dialog \(AppleScriptString.quoted(userInput))"
Using App Shortcuts
import AppShortcuts
let registry = AppRegistry.shared
// Execute a pre-built command
let result = try registry.executeCommand("messages.send_message", arguments: [
"recipient": "+15551234567",
"message": "Hello from JCAppleScript!"
])
// Discover available commands
let commands = registry.commands(forApp: "Reminders")
for cmd in commands {
print("\(cmd.id): \(cmd.name) - \(cmd.description)")
}
// Search across all apps
let results = registry.searchCommands("send")
Using the MCP Server
The jcas-mcp executable is a Model Context Protocol server that AI assistants (Claude, GPT, etc.) can use to control macOS applications.
It is published to the official MCP registry as io.github.johnnyclem/jcas-mcp, and each GitHub release ships a prebuilt jcas-mcp.mcpb bundle (universal macOS binary) that can be installed directly in Claude Desktop via Settings → Extensions.
Setup with Claude Desktop
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"applescript": {
"command": "/path/to/jcas-mcp"
}
}
}
Build the server:
swift build -c release
# Binary at: .build/release/jcas-mcp
Available MCP Tools
| Tool | Description |
|---|---|
execute_applescript |
Execute arbitrary AppleScript code † |
execute_jxa |
Execute JavaScript for Automation (JXA) code † |
tell_application |
Send a command to a specific app via tell block † |
check_script_syntax |
Compile a script (AppleScript or JXA) without executing it |
list_running_applications |
Get currently running applications |
list_registered_apps |
Browse all registered app command sheets |
search_commands |
Search for commands by keyword |
run_app_command |
Execute a pre-built command by ID |
preview_app_command |
Dry-run: show the exact script a command would execute |
get_app_commands |
Get detailed command info for a specific app |
† Hidden and disabled when the server runs in safe mode (see below).
Server Configuration
| Environment variable | Effect |
|---|---|
JCAS_SAFE_MODE=1 |
Disables the arbitrary-code tools (execute_applescript, execute_jxa, tell_application) and registry commands flagged dangerous (e.g. terminal.run_command, safari.run_javascript). Only pre-built, sanitized registry commands remain available. |
JCAS_APP_MANIFESTS=a.json:b.json |
Colon-separated JSON manifest files with additional community app definitions to load at startup. |
CLI flags: jcas-mcp --manifest prints the full registry as JSON, --version prints the server version, --help shows usage.
Example AI Interaction
User: "Send a message to John saying I'll be late"
AI uses tool: run_app_command
command_id: "messages.send_message"
arguments: { "recipient": "John", "message": "I'll be late" }
Supported Applications
JCAppleScript ships with command sheets for 12 built-in macOS apps:
| App | Category | Commands | Examples |
|---|---|---|---|
| Messages | Communication | 6 | Send message, list chats, get participants |
| Communication | 7 | Compose email, search, check mail, list accounts | |
| Reminders | Productivity | 7 | Create/complete/delete reminders, search, list |
| Calendar | Productivity | 6 | Create events, list today's events, upcoming |
| Notes | Productivity | 8 | Create/search/append notes, manage folders |
| Finder | System | 12 | File operations, folder contents, labels, trash |
| Safari | Internet | 10 | Open URLs, manage tabs, run JavaScript, get page content |
| Music | Media | 13 | Playback control, playlists, library search, ratings |
| Terminal | Development | 8 | Run commands, manage windows/tabs, profiles |
| System Settings | System | 13 | Dark mode, volume, notifications, dialogs, system info |
| Xcode | Development | 20+ | Open/build/run/test projects, schemes, build logs, debugging |
| Speech Recognition | System | 3 | Listen for spoken phrases via the system speech engine |
Adding Custom App Support
Implement the ScriptableApp protocol to add support for any scriptable macOS app:
import AppShortcuts
struct MyApp: ScriptableApp {
static let bundleIdentifier = "com.example.myapp"
static let appName = "MyApp"
static let description = "My custom application"
static let category = AppCategory.productivity
static let commands: [AppCommand] = [
AppCommand(
id: "myapp.do_thing",
name: "Do Thing",
description: "Performs the thing",
parameters: [
CommandParameter(name: "input", description: "The input value"),
]
) { args in
let input = args["input", default: ""]
return """
tell application "MyApp"
do thing with "\(input)"
end tell
"""
},
]
}
// Register at runtime
AppRegistry.shared.register(MyApp.self)
Community App Registry
JCAppleScript is designed to grow through community contributions. The app shortcut system uses a standard protocol (ScriptableApp) that makes it easy to:
- Add new applications - Implement
ScriptableAppfor any scriptable macOS app - Extend existing apps - Submit new commands for already-registered apps
- Share command sheets - Export/import app definitions via JSON manifests
We're building a browsable registry (similar to npmjs.org) where you can:
- Browse applications and their supported AppleScript commands
- Submit new commands for existing apps
- Add entirely new applications to the registry
- Generate JSON manifests for integration with other tools
Exporting and Importing the Registry
// Export all registered apps as manifest JSON
let json = try AppRegistry.shared.exportManifestJSON()
// Import community app definitions from a JSON manifest.
// Manifest commands are declarative script templates with ${param}
// placeholders; argument values are sanitized before substitution.
try AppRegistry.shared.loadManifest(contentsOf: URL(fileURLWithPath: "community.json"))
Example manifest:
[
{
"name": "CoolApp",
"bundleIdentifier": "com.example.coolapp",
"description": "A community-contributed app",
"category": "Productivity",
"commands": [
{
"id": "coolapp.greet",
"name": "Greet",
"description": "Show a greeting",
"script": "tell application \"CoolApp\"\n greet \"${who}\"\nend tell",
"parameters": [
{"name": "who", "description": "Who to greet", "required": true, "type": "string"}
]
}
]
}
]
The MCP server loads extra manifests from the JCAS_APP_MANIFESTS environment variable at startup.
Security Model
Registry command arguments are sanitized before script generation:
- String, file-path, and date arguments are escaped (
\,", and control characters) so they cannot break out of AppleScript string literals. - Integer and boolean arguments are strictly validated/normalized — malformed values are rejected at validation and fall back to declared defaults during generation.
- Values outside a parameter's
allowedValueslist are dropped. - Arguments that don't correspond to a declared parameter are discarded.
Commands that execute caller-supplied code (Terminal shell commands, Safari JavaScript) are flagged dangerous and can be disabled wholesale with JCAS_SAFE_MODE=1. Use the preview_app_command tool to inspect the exact script a command will run before executing it.
Note that execute_applescript, execute_jxa, and tell_application execute arbitrary code by design — only expose them to clients you trust, or run the server in safe mode.
Architecture
JCAppleScript/
├── Sources/
│ ├── JCAppleScript/ # Core engine
│ │ ├── AppleScriptEngine.swift
│ │ ├── AppleScriptSanitizer.swift
│ │ ├── ScriptResult.swift
│ │ └── ScriptError.swift
│ ├── AppShortcuts/ # App command registry
│ │ ├── AppProtocol.swift # ScriptableApp protocol
│ │ ├── AppCommand.swift # Command & parameter types + sanitization
│ │ ├── AppDefinition.swift # Instance-based app description
│ │ ├── AppManifest.swift # JSON import/export
│ │ ├── AppRegistry.swift # Central registry
│ │ └── Apps/ # Built-in app sheets
│ │ ├── MessagesApp.swift
│ │ ├── RemindersApp.swift
│ │ ├── FinderApp.swift
│ │ ├── SafariApp.swift
│ │ ├── MailApp.swift
│ │ ├── CalendarApp.swift
│ │ ├── NotesApp.swift
│ │ ├── MusicApp.swift
│ │ ├── TerminalApp.swift
│ │ └── SystemSettingsApp.swift
│ └── JCAppleScriptMCP/ # MCP server
│ ├── main.swift
│ ├── MCPServer.swift
│ ├── MCPTransport.swift
│ └── MCPTypes.swift
├── Tests/
├── Legacy/ # Original Obj-C implementation
├── Package.swift
└── LICENSE
Requirements
- macOS 13.0+
- Swift 5.9+
Legacy
The original Objective-C implementation (2013) is preserved in the Legacy/ directory for reference. It provided basic NSAppleScript wrapping with variable substitution. The new Swift implementation builds on those concepts while adding the MCP server, app registry, and modern Swift patterns.
License
MIT License - Copyright (c) 2013 John Clem. See LICENSE for details.
JCAppleScript MCP questions
What tools does JCAppleScript MCP provide?
It exposes 10 tools, including execute_applescript, execute_jxa, tell_application, check_script_syntax, list_running_applications.
How can I make the server more secure?
You can enable safe mode by setting the JCAS_SAFE_MODE environment variable to 1, which disables arbitrary code execution tools and dangerous registry commands.
Which macOS apps are supported out of the box?
The server includes built-in command sheets for 12 apps, including Messages, Mail, Reminders, Calendar, Notes, Finder, Safari, Music, Terminal, System Settings, Xcode, and Speech Recognition.
Can I add my own applications to the registry?
Yes, you can add support for any scriptable macOS app by implementing the ScriptableApp protocol.
How do I install this on Claude Desktop?
You can install it by adding the server to your Claude Desktop configuration file located at ~/Library/Application Support/Claude/claude_desktop_config.json.