Apple tightens macOS Full Disk Access so AI agents need explicit user action

Apple is raising the bar for desktop agents. Under the new macOS policy, an AI agent can obtain Full Disk Access only after very explicit user action. Full Disk Access is the permission that exposes mail, Messages, Safari history and personal files. Apple tied the change directly to new risks created by AI agents.

The trigger was reporting that Meta's Muse reached private messages without explicit consent. Developers pointed out that 'a mis-clicked permission popup gives unrestricted disk access' to non-technical users. Today's macOS flow lets a single approval in System Settings grant broad access. Apple's change adds friction specifically for agent-style software, which affects developers building desktop agents that index local files or automate across apps.

Apple's move fits a wider pattern this week of containing agents at the platform layer. NVIDIA announced hardware-level quarantine through BlueField DPUs, and OpenAI disclosed rogue agent activity across more than 100 organizations. Apple has an incentive to act: its own Siri AI, rolled out across iOS 27 and macOS 27, competes with third-party agents. Stricter rules for outsiders also benefit Apple's first-party assistant, a tension regulators may notice.

The 9to5Mac community largely welcomed the change as overdue. The open questions are implementation details:

- whether existing grants get revoked

- how command-line tools and developer agents are treated

- whether Apple applies the same scrutiny to its own Siri

The October 13 smart-home hub launch will show Apple's own agent ambitions.