imessage-mcp-server

The server operates locally, reading from the macOS Messages database (`chat.db`) in read-only mode. Communication is handled via standard I/O (StdioServerTransport), which minimizes external network attack surface. The `extractTextFromAttributedBody` function parses potentially complex binary message data, which could theoretically be a source of obscure bugs or resource exhaustion if malformed data is encountered, but includes sanitization logic to filter out non-content strings. No direct arbitrary code execution vulnerabilities or hardcoded secrets are apparent. A critical setup requirement is granting Claude Desktop 'Full Disk Access', a high privilege that users should be aware of, although this is a dependency on the host application's permissions rather than an inherent flaw in the server's code logic.