The AI access checklist.

Work through these by hand in about an hour, or print the page. Ticks here aren't saved.

Apps and permissions

List every AI app you've installed, and remove the ones you no longer use.Check who holds Full Disk Access, and keep it to apps that truly need it.Check Screen Recording, Microphone and Camera for AI apps and meeting note-takers.Check Accessibility, and remove anything you don't recognise.

Browser

Review extensions in every browser you use, not only your main one.Remove AI extensions that can read all sites unless you rely on them.Set the ones you keep to run only on sites you choose, where your browser allows it.

Agents and MCP

List the MCP servers in each AI client you use.Check what each server can do: run commands, change files or reach a database.Remove servers you can't identify or no longer need.Don't run command-line agents with broad access in folders that hold secrets.

Keys and secrets

Look for API keys saved in plain text, including .env files and shell history.Move keys into a password manager or secret store.Replace any key that has been pasted into a chat or committed to a repository.Give each tool its own key, so you can replace one without breaking the rest.

Phones

Check which AI apps hold microphone, camera, contacts and photos access.Remove third-party keyboards you don't trust.On Android, check accessibility and notification access.

Your team

Write down which AI tools are approved and what data they may see.Remove AI access when someone leaves.Repeat this review every three months, and after installing any new agent.

Do the first checks with a free scan

Find out what AI can reach on your computer.

The full scan is free. It takes minutes, needs no account, and stays on your device.

Download free for Mac

AI access security for your own devices. Made by Piruz Labs.