65
/ 100
1 month ago
glama

iconnect-mcp

MCP server for the entire Apple ecosystem — 150+ tools across 17 modules including Notes, Reminders, Calendar, Mail, Messages, Music, Maps, Screen Capture, and Apple Intelligence. macOS only.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
220 tools verified — handlers match their declared behaviour
123 read-only tools verified — handlers contain no write/delete/exec
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: AIRMCP_AUDIT_HMAC_KEY, AIRMCP_HTTP_TOKEN, GEMINI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highesbuild@0.28.0GHSA-gv7w-rqvm-qjhr

esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY

lowesbuild@0.28.0GHSA-g7r4-m6w7-qqqr

esbuild allows arbitrary file read when running the development server on Windows

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAIRMCP_ALLOWED_ORIGINSexport ="https://claude.ai"
configAIRMCP_ALLOW_NETWORKexport ="with-token+origin"
configAIRMCP_APPINTENTS_DESTRUCTIVE
🔐 secretAIRMCP_AUDIT_HMAC_KEY
configAIRMCP_AUDIT_LOG
configAIRMCP_CB_OPEN_MS
configAIRMCP_CB_THRESHOLD
configAIRMCP_COMPACT_TOOLS
configAIRMCP_DEBUG_MODULES
configAIRMCP_DEBUG_SEQUENTIAL
configAIRMCP_DISABLE_POLLERS
configAIRMCP_ELICITATION_DISABLE
configAIRMCP_EMBEDDING_PROVIDERauto Force provider: gemini, swift, hybrid, none
configAIRMCP_EMERGENCY_STOP_PATH
configAIRMCP_FAKE_OS_VERSION
configAIRMCP_FULLfalse Enable all modules (ignores preset)
configAIRMCP_HITL_LEVEL
🔐 secretAIRMCP_HTTP_TOKENexport =$(openssl rand -hex 32)
configAIRMCP_INTENTS_MANIFEST
configAIRMCP_INTENTS_OUT
configAIRMCP_JXA_CONCURRENCY
configAIRMCP_LOCAL_ONLY
configAIRMCP_LOG_FORMAT
configAIRMCP_LOG_LEVEL
configAIRMCP_MAIL_POLL_MS
configAIRMCP_MANAGED_CLIENTS
configAIRMCP_MANIFEST_OUT
configAIRMCP_MUSIC_POLL_MS
configAIRMCP_OAUTH_AUDIENCE
configAIRMCP_OAUTH_ISSUER
configAIRMCP_OAUTH_RESOURCE_DOCS
configAIRMCP_OAUTH_RESOURCE_POLICY
configAIRMCP_OAUTH_RESOURCE_TOS
configAIRMCP_OLLAMA_MODEL
configAIRMCP_RATE_LIMIT
configAIRMCP_SHARE_APPROVAL
configAIRMCP_TELEMETRY
configAIRMCP_TEST_MODE
configAIRMCP_TOKEN_RATIO
configAIRMCP_USAGE_TRACKING
🔐 secretGEMINI_API_KEYGoogle Gemini API key for cloud embeddings (optional)
configMANIFEST_TIMEOUT_MS
configPLAN_EVAL_THRESHOLD
configSMOKE_MIN_TOOLS
configSMOKE_TIMEOUT_MS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/heznpc-airmcp-1fpykn)](https://m8ven.ai/mcp/heznpc-airmcp-1fpykn)
commit: d71627fadde757109a16aed78b39076b28bb12be
code hash: 09eeea24f6292c8965359796d1e509bd8e277438a0482246e5979a2bd94f7cf0
verified: 6/15/2026, 2:19:56 PM
view raw JSON →