Apple plans tighter Mac file access controls as AI agents spread
By Automate Basics, written with AI from TechCrunch's original
Apple plans new controls for macOS Full Disk Access, a permission that can expose files, mail, messages and browsing history to an app. The change matters to people using AI agents on work Macs.
What is changing with Full Disk Access?
Apple says it will add controls to macOS Full Disk Access so granting that permission requires a clearer, deliberate action from the user. TechCrunch reports that the permission was originally designed to help backup apps work, but it can also give an app access to files, mail, messages and browsing history.
Apple says some developers use the permission in ways that may expose more information than users realise. The company points to increasingly capable AI agents as a reason to tighten the decision. Apple has not said that it is removing Full Disk Access. Its stated aim is to make sure people understand the scope of the permission before they grant it.
Who can use the new Mac controls?
People who use desktop AI agents on a Mac are the audience most directly affected by Apple's plan. An agent may ask for access to information on the computer to carry out a task. Full Disk Access is a much broader permission than access to a single file, so the decision also matters on Macs used for work mail, messages and documents.
TechCrunch reports that Apple has announced the controls but has not provided a release date or said which macOS versions will include them. The report gives no price, plan requirements or separate availability details. For now, Mac users should treat this as an announced change, not a control they can assume is already in place.
How do I assess an AI agent on a work Mac?
A useful first task is one that needs a limited set of files, rather than broad access to everything on a Mac. Before giving an AI agent Full Disk Access, consider whether that task really calls for the agent to reach mail, messages, browsing history and other files. Apple says that permission can expose all of those kinds of information.
Check what access the app requests, and review whether the result uses only material relevant to the task. A good answer to a narrow request does not, by itself, show that broad access was necessary. TechCrunch does not describe the new consent process, so there are no new steps to follow yet. The practical decision today is whether the work justifies the access being requested.
Frequently asked questions
What can Full Disk Access let an AI agent read?
Apple says Full Disk Access can give an app access to files, mail, messages and browsing history on a Mac. TechCrunch reports that some desktop AI agents can request this permission. Whether an app needs such broad access depends on the task you want it to perform.
Are Apple's new Full Disk Access controls available now?
TechCrunch reports that Apple plans to introduce additional controls, but the report gives no release date or list of supported macOS versions. Apple says its goal is to require a clearer action from people who choose to grant this broad permission.
Related reading
Meta opens Muse code for building custom AI devicesMeta has released code for connecting its Muse AI agent to hardware people build themselves. The Verge reports that possible projects include a reminder display, while a separate Muse Home Link device can use community-built skills to control connected equipment.
Apple plans tighter Mac disk access controls as AI agent risks growApple plans to make full disk access on Macs harder to grant as AI agents gain the ability to act more independently, The Verge reports. The change matters to anyone who uses apps that can work with files, messages or other information on a work Mac.
Circuit Breaker Labs builds AI users to test chatbot safetyCircuit Breaker Labs has built simulated AI users to test whether chatbots handle psychologically risky conversations. TechCrunch reports that the company is using the product with makers of AI coaching, journaling and mental health support apps.
Written with AI from TechCrunch's original and published after automatic checks: every figure here appears in the original, and no sentence is copied from it. The picture is AI-generated. The original is the authority.
Source: Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents, TechCrunch, 2 Oct 2026.