
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@cardmagic/messages
Advanced tools
Fuzzy search and browse Apple Messages (iMessage/SMS) from the command line, as a Claude Code plugin, or as an MCP server.
~/Library/Messages/chat.db)Install as a plugin to get skills (auto-invoked) and slash commands:
# Add the marketplace
claude plugin marketplace add https://github.com/cardmagic/messages
# Install the plugin
claude plugin install messages@cardmagic
This gives you:
/messages:search and /messages:browseFor direct MCP tool access without the plugin:
claude mcp add --transport stdio messages -- npx -y @cardmagic/messages --mcp
Or install globally first:
npm install -g @cardmagic/messages
claude mcp add --transport stdio messages -- messages --mcp
git clone https://github.com/cardmagic/messages.git
cd messages
make install
# Then add as plugin OR MCP server:
claude plugin marketplace add /Users/you/messages/.claude-plugin/marketplace.json
claude plugin install messages@cardmagic
# OR
claude mcp add --transport stdio messages -- messages --mcp
The tool needs to read your Messages database at ~/Library/Messages/chat.db:
# Show most recent messages (who texted me?)
messages recent
# List contacts by recent activity
messages contacts --limit 10
# List conversations with message counts
messages conversations
# Show recent messages from/to someone
messages from "Mom"
# Show full conversation thread
messages thread "John" --after 2024-12-01
# Build the search index (required before first search)
messages index
# Search for messages
messages search "coffee tomorrow"
# Filter by sender
messages search "dinner" --from "Mom"
# Filter by date
messages search "meeting" --after 2024-01-01
# Adjust result count and context
messages search "project" --limit 20 --context 5
# Show index statistics
messages stats
| Option | Description |
|---|---|
-f, --from <sender> | Filter by sender name or phone |
-a, --after <date> | Only messages after date (YYYY-MM-DD) |
-l, --limit <n> | Max results (default: 10) |
-c, --context <n> | Messages before/after (default: 2) |
Once installed with claude mcp add (see Installation above), Claude Code can use these tools:
| Tool | Description |
|---|---|
search_messages | Search messages with fuzzy matching |
rebuild_message_index | Rebuild the search index |
get_message_stats | Get index statistics |
For Claude Desktop or VS Code, add to your MCP configuration:
{
"mcpServers": {
"messages": {
"command": "npx",
"args": ["-y", "@cardmagic/messages", "--mcp"]
}
}
}
Indexing: Reads your Apple Messages SQLite database and builds:
Searching: Queries both indexes for best results with typo tolerance
Storage: Index files are stored in ~/.messages/:
index.db - SQLite FTS5 databasefuzzy.json - MiniSearch indexstats.json - Index statisticsRun messages index periodically to include new messages. The index doesn't auto-update.
For automatic daily indexing, add a cron job or launchd plist:
# crontab -e
0 4 * * * /path/to/messages index
MIT
FAQs
Fuzzy search and browse Apple Messages/iMessage from CLI or MCP server
The npm package @cardmagic/messages receives a total of 72 weekly downloads. As such, @cardmagic/messages popularity was classified as not popular.
We found that @cardmagic/messages demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.