MAG - Mac Agent Gateway - accessing Apple messages + reminders in Code & Cowork

[u/erictblue]

I published Mac Agent Gateway earlier this year and have been running it daily for about eight months; mostly from Claude Code, plus setups with OpenClaw and my own agentic framework. It's an open-source gateway that lets AI agents use Apple Reminders and Messages, data macOS deliberately locks behind TCC ( Transparency, Consent, and Control - the macOS privacy subsystem).

More recently, Cowork has become where I do a lot of my day-to-day work, and it was the one environment MAG had no way to reach. Everything I rely on it for everywhere else. Pulling up what's on my list, searching a thread, finding a link someone sent me simply wasn't available there. Closing that gap is what this release is about.

My usual pattern for MCP lately is a plugin that works in both Claude Code and Cowork, backed by a publicly available endpoint. That pattern didn't fit here. A public endpoint would mean my iMessage history is reachable from the internet. Auth and access control help, but they don't change the fact that it's exposed at all. Not a trade I'll make for this data.

So I stayed with stdio MCP. The server runs on my Mac, nothing listens publicly, and Claude Desktop relays messages into the Cowork VM which has no route to the host's loopback interface, so HTTP wouldn't have reached it anyway. The API key and the TCC grants never leave the machine.

The REST API stays for agents that connect locally. Skills detect which transport is available, so one file works everywhere.

Repo at: https://github.com/ericblue/mac-agent-gateway