The Honest Safety Story
No vague “we take security seriously” hand-waving. Here's exactly what protects you — and what doesn't.
Notarized by Apple
Apple scanned it for malware. Gatekeeper verifies the signature on every single launch.
Hardened Runtime
Code injection protection enabled — Apple requires this for notarization. No one can tamper with the running process.
Developer ID Signed
Tamper-evident and tied to a verified developer identity. If the binary is modified, macOS refuses to run it.
Keychain with a code-signature ACL
API keys live in your macOS Keychain under an access-control list bound to Agent Mac’s code signature — only the genuine, signed binary can read them. Not a config file, not a browser store.
Zero telemetry — provably
There is no analytics SDK in the binary. No crash reporter phoning home, no usage pings, nothing to opt out of. Your conversations stay in local SQLite; your memory stays in markdown on your disk.
Your own iCloud for remote
iPhone remote control travels through your iCloud account with end-to-end sealing (HKDF + AES-GCM). There is no company backend to breach.
Not Sandboxed — Here's Why
Same as Terminal, VS Code, and every serious dev tool — sandboxing would block the file access, shell commands, and browser automation that make Agent Mac useful. You control the risk through 4 autonomy levels and per-tool enable/disable switches.
You Decide How Much It Does Alone
Ask Always
Confirms every action before running. You stay in full control of every read, write, and command.
Smart
Auto-approves safe reads, asks before writes and shell commands. The best of both worlds.
Full Auto
Hands-free within guardrails. Ideal for scheduled tasks that run while you sleep.
Yolo
No guardrails, unlimited steps. For people who know exactly what they asked for.
On top of the levels, every one of the 18 tools has its own on/off switch.
Don't take our word for it — verify it yourself
spctl -a -vv /Applications/Agent\ Mac.appThis is Apple's own spctltool. If it says “accepted” and “Notarized Developer ID”, the app is legitimate and untampered.
Downloads are temporarily paused.
Register your interest and we'll let you know when access opens again.
Register interest