What AI Apps Can Access on Your Mac and How to Check

AI apps on a Mac can reach only what macOS lets them reach, plus what you open or paste into them. You can see most of this in System Settings > Privacy & Security, where each permission has its own list of apps. Check Full Disk Access, Accessibility and Screen & System Audio Recording first, because they give the widest reach.

This guide walks through each setting, what it means for an AI app, and how to remove access you no longer want. You will also check three places that System Settings does not show: browser extensions, agent configs and keys stored in plain text.

What macOS controls

macOS asks for your consent before an app can reach many kinds of data. Apple's overview of app access to files explains that apps need consent for the Desktop, Documents and Downloads folders, and must be added by hand for full storage access. Automation and accessibility features also need your permission, so that they can't be used to get around those rules.

A permission tells you what an app is allowed to reach. It does not tell you what the app did with that access, or what it sent to its maker. Apple notes that data collected by a third-party app falls under that app's own terms and privacy policy.

The permissions that matter most for AI apps

To open these lists, choose Apple menu > System Settings, then click Privacy & Security in the sidebar. You may need to scroll down. Apple keeps a full list of these settings with a short meaning for each.

Full Disk Access: reach to nearly all files, including other apps' data and Time Machine backups. Apple advises granting it sparingly. Few AI apps need it.
Accessibility: lets an app control your Mac through system commands. Desktop agents and tools that click and type for you often ask for this.
Screen & System Audio Recording: lets an app record your screen and audio, or audio alone. Meeting assistants and screen-aware assistants often ask for this.
Input Monitoring: lets an app monitor your keyboard, mouse and trackpad input.
Automation: lets an app control other apps, such as Mail, Safari or Finder.
Files & Folders: controls reach to specific places such as Desktop, Documents and Downloads.
Microphone and Camera: control live audio and video input.
Contacts, Calendars, Photos and Reminders: control reach to personal data. Accessibility access can also expose contacts and calendars, according to Apple.

How to review access step by step

Set aside ten minutes and work through the lists in order. Write down each AI app you find, including note takers, voice tools, coding tools and desktop agents.

Choose Apple menu > System Settings > Privacy & Security.
Click Full Disk Access and read the list. Turn off any AI app that does not clearly need it.
Go back and click Accessibility. Turn off apps you do not use for control or automation.
Go back and click Screen & System Audio Recording. Turn off any app that should not see or hear your screen.
Go back and click Input Monitoring. Treat any unknown name here as worth a closer look.
Go back and click Automation. Expand each app and turn off control of apps it does not need, as Apple describes in its Automation guide.
Go back and click Files & Folders. Turn off specific locations for each app.
Check Microphone, Camera, Contacts, Calendars and Photos the same way.
Open Apple menu > System Settings > General > Login Items & Extensions. Remove AI apps that you do not want running when you log in.

If an app stops working after a change, turn on only the one permission it asks for. Then test it again. Some apps must restart before a change takes effect, so quit and reopen them.

What to check for agents and terminal tools

Command line agents need a separate check. A tool you start from Terminal usually works under Terminal's permissions, not its own. If Terminal has Full Disk Access, an agent running inside it may have that reach too. The same idea can apply to other terminal apps and code editors.

Open the Full Disk Access list and look for Terminal, iTerm, VS Code, Cursor or similar apps.
If you do not need that access every day, turn it off. You can turn it on again for a single task.
Open your home folder in Finder and press Command + Shift + Period to show hidden files.
Look for agent and MCP settings, such as ~/.cursor/mcp.json and ~/.claude.json.
Check Claude Desktop's list of servers in ~/Library/Application Support/Claude/claude_desktop_config.json.

Each entry in these files can start a program with your user rights. Read our guide to MCP server security for what to look for.

What to check outside System Settings

macOS privacy lists do not cover everything an AI tool can reach. Check these as well.

Browser extensions: an AI extension can read pages you visit if you allow it. In Chrome, open chrome://extensions. In Safari, choose Safari > Settings > Extensions.
Keys in plain text: API keys in .env files, shell profiles and agent configs can be read by anything running as you.
Shared folders: files in cloud sync folders can reach AI features in those services, depending on your plan and settings.
Pasted content: anything you paste into a chat goes to that service, whatever your Mac settings say.

If reviewing each list by hand takes too long, one way to check this quickly is Prycheck. It is a local app that lists AI apps, permissions, extensions, agent configs and plain text keys on your device, and it sends nothing anywhere. It shows what can be reached, not what an app actually does, and it is not an antivirus.

How to keep access small

Grant a permission when you need it, not because a setup screen asked for everything.
Give an app Files & Folders access before you consider Full Disk Access.
Remove permissions when you stop using an app. Deleting an app is the cleanest way to end its access, so also check its login items afterwards.
Review the lists after major macOS updates and after you install any new AI tool.
Turn on FileVault in Privacy & Security if it is off, so your disk stays encrypted when the Mac is shut down.

Frequently asked questions

Can an AI app read all my files on a Mac?

Only if macOS allows it. An app with Full Disk Access can reach nearly all your files. Without it, apps need consent for protected places such as Desktop, Documents and Downloads, and they can still read files you open in them.

Does the permission list show what an app sent online?

No. The lists show what an app may reach, not what it did. For that, read the app's privacy policy and any activity log it offers.

Is it safe to give an AI agent Accessibility access?

It is a large grant, because the agent can control your Mac through system commands. Give it only to tools you trust and use. Turn it off when you finish the task if the app works without it the rest of the time.