Apple Tightens Mac Permissions as AI Agents Gain More Access
Mac computers are heading for a significant change in how applications receive broad access to user data, with Apple announcing additional controls around macOS Full Disk Access as AI agents become more capable of acting on users’ behalf.
The permission can expose files, email, messages and browsing history to an application. Apple says some developers are using it in ways that could put users at risk, prompting the company to make approval more explicit.
Why Apple is changing Mac permissions now
Apple’s mobile devices such as the iPhone and iPad generally isolate applications from one another through sandboxing, limiting an app’s ability to access data stored by another app by default.
Mac computers are more flexible. Full Disk Access allows a user to give an application unusually broad access across the system, a capability originally intended for software such as backup services that need to read data from many locations.
AI agents change the risk equation because they can combine access to information with the ability to interpret it, make decisions and carry out a sequence of actions for the user.
What can Full Disk Access expose?
Apple says the permission can expose a wide range of information, including files, mail, messages and browsing history.
The company also warned that communication applications can affect more than the device owner’s privacy, because broad access may expose information belonging to people who communicate with that user.
What is actually changing?
Apple has not yet announced when the new controls will arrive or what their final interface will look like.
The company has, however, said that users who want to grant an application Full Disk Access will need to take more explicit action before that level of access is approved.
The change does not eliminate Full Disk Access and does not prevent AI applications from requesting it. Instead, Apple is raising the level of consent required before an app receives extensive access to a Mac.
Meta Muse puts the issue in the spotlight
Apple’s announcement came amid complaints involving Meta’s Muse AI agent, which can carry out tasks such as canceling unused subscriptions and negotiating for better prices.
Technology columnist Jason Aten said Muse had read private messages on his Mac even though, according to his account, Full Disk Access had not been enabled.
Meta disputed the claim. Company spokesperson Andy Stone said access to Apple’s Messages app is strictly opt-in and that users must enable both Full Disk Access and the Messages connector before Muse can read Messages content.
Meta also said those permissions can be revoked at any time. The circumstances described by Aten therefore remain disputed, with no independently established evidence in the published reporting that Muse bypassed macOS permissions.
The issue is bigger than one AI agent
Apple framed its announcement more broadly than the Muse dispute, linking the change to the rapid development of AI agents and warning that the risks associated with broad system access will increase as those systems become more capable and autonomous.
That creates a wider challenge for technology companies: allowing AI agents to perform useful tasks without granting them more access to personal information than those tasks require.
What Mac users should know
There is no immediate change users need to activate today because Apple has not yet announced a rollout date.
But Full Disk Access is becoming a more consequential permission as more AI applications seek access to files, messages and other services. Users will increasingly need to distinguish between granting access to a specific resource and giving an application broad visibility across a Mac.
Apple’s direction is clear: more capable AI agents will be matched by more explicit consent when access to personal data is involved.
Sources
Apple — Updates to Full Disk Access in macOS — October 2, 2026.
Reuters — Apple’s Mac permission changes and the Meta Muse dispute — October 2, 2026.
