
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
apple-shortcuts-mcp
Advanced tools
MCP server for Apple Shortcuts on macOS.
Provides access to shortcuts for discovery, inspection, and execution. Run shortcuts with structured input and output handling.
search_tools and get_tool_info for context-constrained clientsshortcuts_health, shortcuts_permission_guide, shortcuts_refresh_stateWith uv installed:
uvx apple-shortcuts-mcp
No clone, no venv management.
git clone https://github.com/JonathanRReed/Apple-MCPs.git
cd Apple-MCPs
uv sync --all-packages
This builds one workspace environment with every server's entry point in .venv/bin (for example .venv/bin/apple-shortcuts-mcp). You can also point an MCP client at AppleShortcuts-MCP/start.sh, which prefers uv run and falls back to a plain venv bootstrap (Python 3.11+ required).
{
"mcpServers": {
"apple-shortcuts": {
"command": "uvx",
"args": ["apple-shortcuts-mcp"],
"env": {
"APPLE_SHORTCUTS_MCP_SAFETY_MODE": "full_access"
}
}
}
}
Running from a clone instead? Use /path/to/Apple-MCPs/AppleShortcuts-MCP/start.sh as the command with empty args.
claude mcp add --transport stdio --scope project apple-shortcuts -- uvx apple-shortcuts-mcp
stdio is the default and recommended transport. Set APPLE_SHORTCUTS_MCP_TRANSPORT=streamable-http (with optional APPLE_SHORTCUTS_MCP_HOST and APPLE_SHORTCUTS_MCP_PORT) to serve Streamable HTTP instead.
shortcuts CLI must be availableuvx apple-shortcuts-mcp (or a clone's AppleShortcuts-MCP/start.sh) to your MCP clientshortcuts_health firstshortcuts_permission_guideshortcuts_refresh_statetools/list returns the full Shortcuts tool surface. Context-constrained clients can use search_tools first, then get_tool_info for the Shortcuts tool they need.FAQs
Local Apple Shortcuts MCP server for macOS
The pypi package apple-shortcuts-mcp receives a total of 95 weekly downloads. As such, apple-shortcuts-mcp popularity was classified as not popular.
We found that apple-shortcuts-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.