Brief
Apple tightens macOS permissions to curb AI agents
Apple's latest macOS update adds stricter Full Disk Access rules to block AI agents from unrestricted data access.
By Felo News Desk · Published
Apple posted an update on its developer forum on October 2, 2026, announcing new macOS controls that make it harder for AI agents to run on Macs. The change requires developers to obtain both Full Disk Access and an enabled Messages connector before an AI application can read a user's messages, according to Lifehacker.
What happened
The company’s developer‑focused announcement detailed that the new policy blocks AI agents from automatically accessing a Mac’s file system and Messages data unless the user explicitly grants two separate permissions. Apple framed the move as a response to growing concerns about AI agents that request near‑total device access, which can expose messages, files, passwords and other sensitive information.
What the reports add
Lifehacker noted that the timing coincides with a surge in “agentic AI” tools such as OpenAI’s new agents and Meta’s Muse, which have recently attracted millions of downloads. The outlet highlighted that some users have already given AI bots full control of their Macs, raising the risk of malicious prompts that could hand hackers access to banking credentials. Apple’s statement, as quoted by Lifehacker, criticises developers for asking users to grant Full Disk Access without explaining the implications.
What was said
Lifehacker’s Jake Peterson wrote that Apple “is all about privacy and security” and suggested the company is likely “watching in horror” as users hand over their Macs to automated bots. The article also referenced Apple’s own description of the update, which emphasizes the dangers of unrestricted Full Disk Access.
How it came about
Apple’s push follows earlier reports of AI agents needing extensive permissions to function, and follows the company’s broader effort to tighten privacy controls across its ecosystem. Earlier this month, Felo News covered Apple’s revision of macOS Full‑Disk Access that now blocks AI agents from reading Messages without both permissions (Apple revises macOS full‑disk access to block AI agents from reading messages). The new update builds on that policy by explicitly linking Full Disk Access to a Messages connector, further limiting the data AI agents can scrape.
Key facts
- Apple requires both Full Disk Access and a Messages connector for AI apps to read user messages. (lifehacker.com)
- The change was announced on Apple’s developer forum on October 2, 2026. (lifehacker.com)
- Apple criticized developers for asking users to grant Full Disk Access without explaining risks. (lifehacker.com)
- Lifehacker linked the update to the rise of agentic AI tools like OpenAI’s agents and Meta’s Muse. (lifehacker.com)
Sources
- [1] lifehacker.com — originally reported as “Apple Wants to Make It Harder to Run Agentic AI on Your Mac”
