mcp-icloud 2.1.2 → 2.1.3

package/PRIVACY.md

@@ -0,0 +1,55 @@
+# Privacy policy
+
+Effective 10 August 2026. Applies to the mcp-icloud server (the software you
+run), not to any AI client you connect it to.
+
+## The short version
+
+mcp-icloud runs on your machine and works for you. It has no servers of its
+own, no analytics, no telemetry, and no way to see your data. The author
+never receives anything.
+
+## What the software touches, and where it goes
+
+When a connected AI client (Claude Desktop, for example) calls a tool, the
+server reads or writes data in your Apple services: mail, calendar events,
+contacts, reminders, notes, messages, and Safari tabs. Two things happen
+with that data, and nothing else.
+
+First, tool results are returned to the AI client that asked for them. What
+that client does with the data is governed by its own privacy policy, not
+this one. Nothing is sent anywhere unless a client you connected asks.
+
+Second, in cloud mode the server talks to Apple's servers on your behalf
+(imap.mail.me.com, smtp.mail.me.com, caldav.icloud.com,
+contacts.icloud.com), over TLS, authenticated with credentials you
+provided. In local mode the server makes no network connections at all; it
+drives the apps already on your Mac, and macOS asks for your consent per
+app before any of that works. You can revoke that consent at any time in
+System Settings under Privacy and Security.
+
+## Credentials
+
+Cloud mode needs your iCloud address and an app-specific password. You
+store them yourself, either in a local .env file or in the macOS Keychain
+when you install the desktop extension. The server reads them once at
+startup, sends them only to Apple, and never writes them to any log.
+Diagnostics print a fixed mask instead of the value. Local mode needs no
+credentials at all.
+
+## What is kept
+
+Nothing. The server is stateless: no database, no cache, no files written.
+When it stops, nothing of yours remains in it.
+
+## Third parties
+
+There are none. No data is sold, shared, or transferred to anyone. The only
+parties that ever see your data are Apple (which already has it) and the AI
+client you chose to connect.
+
+## Changes and contact
+
+Changes to this policy are made in this file, in the open, with the
+repository's history as the record. Questions and concerns:
+https://github.com/MrGo2/icloud-mcp/issues

package/README.md

@@ -34,7 +34,9 @@ Credentials are never logged. `ICLOUD_APP_PASSWORD` is read once at startup and
 
 Every tool argument is validated against a zod schema before the handler runs. Arguments are also coerced at each AppleScript interpolation site, so a value that is not a number cannot reach a script template.
 
-The server collects nothing and keeps nothing: no telemetry, no analytics, no state on disk. The full policy is in [PRIVACY.md](PRIVACY.md).
+## Privacy Policy
+
+The server collects nothing and keeps nothing: no telemetry, no analytics, no state on disk. Your data moves only between your machine, the AI client you connect and Apple's services. The full policy, covering collection, storage, third-party sharing, retention and contact, is in [PRIVACY.md](PRIVACY.md).
 
 ## Tools
 
@@ -115,7 +117,7 @@ Reading requires the [`imsg`](https://github.com/steipete/imsg) CLI and Full Dis
 
 ### Tool annotations (MCP hints)
 
-Every tool declares its behaviour explicitly instead of relying on the spec defaults, which are deliberately pessimistic. All `list-*`, `read-*`, `search-*` and `get-*` tools, plus `about` and `check-auth-status`, are marked read-only. The four destructive tools (`delete-event`, `delete-contact`, `delete-reminder`, `close-safari-tab`) carry `destructiveHint`. Tools that reach the network or another person carry `openWorldHint`: all Email and Calendar tools, `send-message`, `react-message` and `open-safari-url`. The read-only tools plus `mark-as-read`, `complete-reminder`, `update-reminder`, `update-event` and `set-mode` are marked idempotent.
+Every tool declares its behaviour explicitly instead of relying on the spec defaults, which are deliberately pessimistic. All `list-*`, `read-*`, `search-*` and `get-*` tools, plus `about` and `check-auth-status`, are marked read-only. Nine tools carry `destructiveHint`: the four deletions (`delete-event`, `delete-contact`, `delete-reminder`, `close-safari-tab`), the three that reach another person irrevocably (`send-email`, `send-message`, `react-message`) and the two in-place updates (`update-event`, `update-reminder`). Tools that reach the network or another person carry `openWorldHint`: all Email and Calendar tools, `send-message`, `react-message` and `open-safari-url`. The read-only tools plus `mark-as-read`, `complete-reminder`, `update-reminder`, `update-event` and `set-mode` are marked idempotent.
 
 ## Installation
 

package/calendar/index.js

@@ -218,7 +218,7 @@ const calendarTools = [
       description: z.string().optional().describe('New description (optional)'),
       location: z.string().optional().describe('New location (optional)')
     },
-    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},
+    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":true},
     handler: withErrorHandler(handleUpdateEvent, 'update-event')
   },
   {

package/contacts/index.js

@@ -309,7 +309,7 @@ const contactsTools = [
   {
     name: 'delete-contact',
     title: 'Delete Contact',
-    description: 'Permanently deletes a contact from the user\'s address book. Takes the handle returned by list-contacts or search-contacts; confirm the target with read-contact first, because there is no undo through this server.',
+    description: 'Permanently deletes a contact from the user\'s address book. Takes the handle returned by list-contacts or search-contacts; there is no undo through this server.',
     inputSchema: {
       contactUrl: z.string().describe('URL or ID of the contact to delete (from list-contacts output)')
     },

package/email/index.js

@@ -225,7 +225,7 @@ const emailTools = [
       body: z.string().describe('Email body content'),
       isHtml: z.boolean().optional().describe('Whether the body is HTML (default: false)')
     },
-    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true},
+    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true},
     handler: withErrorHandler(handleSendEmail, 'send-email')
   },
   {

package/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 /**
- * iCloud MCP Server v2.1.1
+ * iCloud MCP Server
  *
  * Provides Claude with access to Apple services:
  * - Email (via IMAP/SMTP or Mail.app)
@@ -21,6 +21,7 @@ const { McpServer } = require('@modelcontextprotocol/server');
 const { serveStdio } = require('@modelcontextprotocol/server/stdio');
 
 const config = require('./config');
+const { version } = require('./package.json');
 const { getMode, onModeChange } = require('./mode');
 
 // Import all modules - tools are always available, handlers check mode
@@ -56,7 +57,7 @@ function buildServer() {
   const server = new McpServer(
     {
       name: 'icloud-mcp',
-      version: '2.1.1',
+      version,
       title: 'iCloud MCP'
     },
     {
@@ -98,7 +99,7 @@ mode returns an error. Use set-mode to switch without restarting.`
   return server;
 }
 
-console.error('[icloud-mcp] Starting iCloud MCP server v2.1.1...');
+console.error(`[icloud-mcp] Starting iCloud MCP server v${version}...`);
 console.error(`[icloud-mcp] Initial mode: ${getMode().toUpperCase()}`);
 console.error(`[icloud-mcp] Tools available: ${TOOLS.length}`);
 

package/messages/index.js

@@ -110,13 +110,13 @@ const messagesTools = [
   {
     name: 'send-message',
     title: 'Send Message',
-    description: 'Send an iMessage or SMS. IMPORTANT: Always confirm with user before sending.',
+    description: 'Sends an iMessage or SMS to a phone number or email handle, with an optional file attachment. The message is delivered as soon as the tool runs; there is no draft step and no recall.',
     inputSchema: {
       to: z.string().describe('Recipient phone number (with country code) or email'),
       body: z.string().describe('Message content'),
       file: z.string().optional().describe('Path to file attachment (optional)')
     },
-    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true},
+    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true},
     handler: withErrorHandler(async ({ to, body, file }) => {
       const modeError = requireLocalMode('send-message');
       if (modeError) return modeError;
@@ -144,7 +144,7 @@ const messagesTools = [
       chatId: z.number().int().describe('Chat ID'),
       type: z.enum(['love', 'like', 'dislike', 'laugh', 'emphasis', 'question']).describe('Reaction type')
     },
-    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true},
+    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true},
     handler: withErrorHandler(async ({ chatId, type }) => {
       const modeError = requireLocalMode('react-message');
       if (modeError) return modeError;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mcp-icloud",
   "mcpName": "io.github.MrGo2/icloud-mcp",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "description": "MCP server for Apple services - Email, Calendar, Contacts, Reminders, Notes, Messages and Safari - with dual local (AppleScript) and cloud (IMAP/CalDAV/CardDAV) modes",
   "main": "index.js",
   "bin": {
@@ -22,6 +22,7 @@
     "utils/",
     "LICENSE",
     "README.md",
+    "PRIVACY.md",
     "DISCLOSURE"
   ],
   "scripts": {

package/reminders/index.js

@@ -115,7 +115,7 @@ const remindersTools = [
       dueDate: z.string().optional().describe('New due date in ISO format'),
       priority: z.number().int().min(0).max(9).optional().describe('New priority level')
     },
-    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},
+    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false},
     handler: async ({ reminderId, ...updates }) => {
       const modeError = requireLocalMode('update-reminder');
       if (modeError) return modeError;