Apple Will Tighten Mac File-Access Controls, Citing Risks From AI Agents

Giving an AI agent broad access to a Mac will require more explicit user action under changes Apple says it will introduce. The company is targeting Full Disk Access, a permission that reaches personal files and communications. Its warning is about more than what an app can read: Apple says increasingly capable, autonomous agents will substantially increase the risks of that access.

A backup permission meets autonomous software

Full Disk Access was designed to let backups function properly, TechCrunch explains. It gives an app permission to reach files, mail, messages and browsing history. That makes it a broad grant of access, rather than permission to work with just one document or one conversation. The scope is central to Apple’s concern: users may not fully understand how much personal information they are making available.

Desktop AI agents bring a different use for that permission. Apps including OpenClaw, Dots and Muse often encourage users to enable Full Disk Access so they can work with files, messages and other data, according to Engadget. That access lets agents perform more kinds of tasks. The usefulness and the exposure come from the same mechanism: making more of the computer’s contents available to the software.

The privacy decision reaches other people

In its developer-facing warning, Apple said some developers are using Full Disk Access in ways that could expose users’ systems without their full knowledge and understanding. The company’s objection is not simply that these apps request a powerful permission. It is that the breadth of the exposure may not be clear to the person granting it.

Apple also warned that access to communication apps can compromise the privacy of the people a user communicates with. A message contains information from someone besides the Mac’s owner. That makes the permission decision consequential beyond the person clicking through the setup: the material an agent can reach may include other people’s side of a private exchange.

Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action.

Apple, in its developer update, quoted by Engadget

A clearer choice, with the design still unspecified

The promised change focuses on how users grant the permission. Apple’s wording leaves room for people who genuinely want an app to have this access; it does not describe a blanket ban. The company says its goal is to ensure users understand the risks before granting access, allowing them to make informed decisions about their data and privacy.

The reason Apple gives for acting now is the growing capability and autonomy of AI agents. Its warning looks ahead: the company expects the risks attached to broad access to grow substantially as agents become more capable. That is Apple’s assessment of the direction of risk, not a claim that every app requesting Full Disk Access has misused it.

Apple has not specified what the additional controls will look like or when they will roll out, Engadget reports. For users and developers, that leaves the practical change unresolved. The announcement sets a consent requirement, but does not yet explain the steps an app’s users will face. It is a commitment to change the permission process, not a completed macOS rollout.