Skip to content

Releases

0.7.0: no dialogs

0.7.0: no dialogs Latest
Latest

Choose a tag to compare

View all tags
@mureev mureev released this 06 Nov 20:23
v0.7.0
233bc10

First public release of Mac Terminal MCP (formerly Mac Ops): a sandboxed terminal for Claude on your Mac. No dialogs, no dependencies, no telemetry.

What it does

  • A local MCP server for the Claude desktop app (chat and Cowork), or any stdio MCP client: run commands, keep long jobs going in tmux sessions, read and edit files, keep the Mac awake.
  • No approval dialogs. Every command runs inside one macOS sandbox profile (Seatbelt), the fence: it can't read ~/.ssh, ~/.aws or the Keychain, can't write outside your home folder, and can't change files that run later outside the sandbox (shell startup files, LaunchAgents, git hooks, MCP and Claude config).
  • When the fence blocks something you asked for (git push, brew install, osascript), Claude reruns it with outside_sandbox=true and a one-line why. It's logged, never silent.
  • A self-test at every start proves the fence on your Mac, including that fenced commands can't reach the server's own tmux. If it fails, shell commands are refused rather than run unsandboxed.
  • One Python file, standard library only, run by the system Python.

Install

brew install tmux
git clone https://github.com/mureev/mac-terminal-mcp && cd mac-terminal-mcp
bash install.sh

Upgrading from Mac Ops: install.sh replaces the mac-ops entry and keeps your old audit log.

Full list of changes: CHANGELOG.md. Why this exists: the Desktop Commander audit.

Assets 2
Loading