Skip to content
Notarized by Apple

The Honest Safety Story

No vague “we take security seriously” hand-waving. Here's exactly what protects you — and what doesn't.

Notarized by Apple

Apple scanned it for malware. Gatekeeper verifies the signature on every single launch.

Hardened Runtime

Code injection protection enabled — Apple requires this for notarization. No one can tamper with the running process.

Developer ID Signed

Tamper-evident and tied to a verified developer identity. If the binary is modified, macOS refuses to run it.

Keychain with a code-signature ACL

API keys live in your macOS Keychain under an access-control list bound to Agent Mac’s code signature — only the genuine, signed binary can read them. Not a config file, not a browser store.

Zero telemetry — provably

There is no analytics SDK in the binary. No crash reporter phoning home, no usage pings, nothing to opt out of. Your conversations stay in local SQLite; your memory stays in markdown on your disk.

Your own iCloud for remote

iPhone remote control travels through your iCloud account with end-to-end sealing (HKDF + AES-GCM). There is no company backend to breach.

Not Sandboxed — Here's Why

Same as Terminal, VS Code, and every serious dev tool — sandboxing would block the file access, shell commands, and browser automation that make Agent Mac useful. You control the risk through 4 autonomy levels and per-tool enable/disable switches.

You Decide How Much It Does Alone

Ask Always

Confirms every action before running. You stay in full control of every read, write, and command.

Smart

Auto-approves safe reads, asks before writes and shell commands. The best of both worlds.

Full Auto

Hands-free within guardrails. Ideal for scheduled tasks that run while you sleep.

Yolo

No guardrails, unlimited steps. For people who know exactly what they asked for.

On top of the levels, every one of the 18 tools has its own on/off switch.

Don't take our word for it — verify it yourself

# Run this in Terminal after installing Agent Mac
$spctl -a -vv /Applications/Agent\ Mac.app
Agent Mac.app: accepted
source=Notarized Developer ID
origin=Developer ID Application: ...

This is Apple's own spctltool. If it says “accepted” and “Notarized Developer ID”, the app is legitimate and untampered.

Downloads are temporarily paused.

Register your interest and we'll let you know when access opens again.

Register interest