# apple-icloud-mcp Unofficial MCP server for Apple's services — Apple Music playlists and library, iCloud Calendar, Contacts and Mail, Apple Maps, WeatherKit and iTunes search — that runs anywhere, no Mac needed. Not affiliated with Apple. Developed and maintained by AI (Cl - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 0.3.0 - **Author:** Claude Code - **License:** MIT - **npm:** apple-icloud-mcp - **Source:** https://github.com/chrischall/apple-icloud-mcp - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-10-01T02:06:01.160Z - **Version scanned:** 0.3.0 - **CVEs:** none found by OSV at scan time ## Tools 8 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `apple_calendar_list_calendars` — List your iCloud calendars (event calendars only): id, name, color, whether you can add events to it, whether it is - `apple_calendar_list_events` — List iCloud Calendar events (appointments, meetings) in a date window, recurring events expanded into occurrences, - `apple_calendar_search_events` — Search iCloud Calendar events by text (case-insensitive match in title, location or notes) within a date window: - `apple_calendar_get_event` — Get one iCloud Calendar event in full (notes untruncated, attendees, alerts, recurrence rule in plain English) by the - `apple_calendar_create_event` — Create an iCloud Calendar event: title, startDate/endDate (timed default 1 hour; all-day endDate = last day), - `apple_calendar_update_event` — Change an iCloud Calendar event: title, startDate/endDate, isAllDay, location, notes, url ("" clears), alarms, - `apple_calendar_delete_event` — Delete an iCloud Calendar event. Recurring: span thisEvent (default; the one occurrence an "#occ=" id names), - `apple_calendar_find_free_time` — Find free time in your iCloud calendars: open slots per day within working hours (workdayStart/workdayEnd, default ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"apple-icloud\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"apple-icloud-mcp\"\n ],\n \"env\": {\n \"APPLE_PRIVATE_KEY\": \"\",\n \"APPLE_MUSIC_PRIVATE_KEY\": \"\",\n \"APPLE_MAPS_PRIVATE_KEY\": \"\",\n \"APPLE_WEATHERKIT_PRIVATE_KEY\": \"\",\n \"APPLE_MUSIC_DEVELOPER_TOKEN\": \"\",\n \"APPLE_MUSIC_USER_TOKEN\": \"\",\n \"APPLE_MUSIC_WEB_USER_TOKEN\": \"\",\n \"APPLE_MUSIC_WEB_DEVELOPER_TOKEN\": \"\",\n \"ICLOUD_APP_PASSWORD\": \"\",\n \"MCP_CONFIRM_SECRET\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `APPLE_PRIVATE_KEY` — Apple Private Key (optional) - `APPLE_MUSIC_PRIVATE_KEY` — Apple Music Private Key (optional) - `APPLE_MAPS_PRIVATE_KEY` — Apple Maps Private Key (optional) - `APPLE_WEATHERKIT_PRIVATE_KEY` — Apple Weatherkit Private Key (optional) - `APPLE_MUSIC_DEVELOPER_TOKEN` — Apple Music Developer Token (optional) - `APPLE_MUSIC_USER_TOKEN` — Apple Music User Token (optional) - `APPLE_MUSIC_WEB_USER_TOKEN` — Apple Music Web User Token (optional) - `APPLE_MUSIC_WEB_DEVELOPER_TOKEN` — Apple Music Web Developer Token (optional) - `ICLOUD_APP_PASSWORD` — Icloud App Password (optional) - `MCP_CONFIRM_SECRET` — Mcp Confirm Secret (optional) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 10 credentials (0 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Extensive blast radius — deletes data; holds an api key. - Floor 54, ceiling 54 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/apple-icloud-mcp - Install plan: https://forgeregistry.com/api/v1/packages/apple-icloud-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/apple-icloud-mcp - HTML page: https://forgeregistry.com/registry/apple-icloud-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.