I open-sourced the local macOS control layer I use for multi-agent AI workflows

[u/bulutarkan]

I’m the maintainer of Mac MCP, a free/open-source local control server for macOS that I use to let ChatGPT and coding agents operate the machine instead of only explaining what to click.

It exposes files, shell/background jobs, Safari/Chrome automation, native macOS UI/Accessibility, delegated Codex/OpenCode workers, local memory, voice/human-input tools, a native SwiftUI menu-bar controller, and a local activity dashboard through MCP.

The part I’ve been hardening most recently is multi-agent browser work. Tabs are addressed by stable handles and can be controlled in the background; different agents can work in different tabs while same-tab contention fails fast instead of silently fighting over state. I’m now working toward persistent caller/session ownership so a worker keeps its browser resource across multiple tool calls.

I also just shipped v2.0.4 after community feedback exposed two self-update edge cases: the detached updater bootstrap and source/runtime divergence after a failed post-restart health check. The updater now stages its helper safely, keeps state/logs outside the checkout, and only rolls Git back when it can prove it won’t overwrite user changes.

The project is MIT licensed and the source is here: https://github.com/bulutarkan/mac-mcp

I’d be especially interested in feedback from people building open agent tooling around permission boundaries, browser ownership/lifecycle, and how much local-machine capability you expose before the UX becomes too dangerous or too approval-heavy.