Apple said Friday it will add new controls to the macOS Full Disk Access permission so that users can grant it only through clearly deliberate action, pointing to the growing number of AI agents that request sweeping access to the Mac. The change was announced in a post on Apple's developer news site and reported by TechCrunch, which later updated its story to stress that the move is about informed consent rather than a reduction in what the permission allows.

What Happened

Full Disk Access is a setting in macOS privacy controls that lets an app read data the system normally walls off from third-party software, including files, mail, messages and browsing history. In its Oct. 2 post, Apple said the permission largely bypasses its other privacy protections and exists so backup applications can work properly.

Apple said some developers are now using the permission in ways that could put users at risk, exposing the full contents of their systems without users fully understanding what they have agreed to. It added that for communication apps, the exposure also reaches the people a user exchanges messages with.

RelatedJPMorgan Bars Outside AI Agents From Customer Accounts as Dimon Warns of 'Rogue Agents'

The company said it will introduce additional controls so that only users who really want to give an app this level of access can do so, and only through "very explicit user action." It did not describe what the new consent flow will look like, which version of macOS will include it or when it will ship.

Apple framed the change around AI. As agents become more capable and autonomous, the company wrote, the risks that come with this level of access will grow substantially.

Why It Matters

Desktop agents that act on a user's behalf, such as Meta's Muse and OpenAI's Dots, work best when they can see email, documents and chat history. Muse optionally asks Mac users to turn on Full Disk Access during setup, according to TechCrunch. Apple's post signals that the platform owner will not leave that decision to a single checkbox buried in System Settings.

The timing follows two episodes that drew attention to agent permissions on the Mac. Jason Aten, a columnist for Inc., wrote days earlier that Muse knew the contents of his private messages even though he had not given it permission; Meta disputed his account. TechCrunch also cited a Wired report about a flaw in ChatGPT's Mac app that could have allowed attackers to reach sensitive data.

The Primary Wire has covered Meta's push to bring Muse to Macs and connected services. For companies building such agents, a harder consent step could slow onboarding and reduce how many users grant the broadest access, which in turn limits what the agents can do without asking.

Context

Apple's permission model on the Mac has long relied on prompts for specific resources, such as the camera, contacts or a given folder, with Full Disk Access serving as the exception for software that genuinely needs to see everything. Backup and security tools are the classic examples. Agents blur that line because their usefulness grows with the data they can read, and because they can take actions with what they find.

TechCrunch's correction is a useful distinction for developers: Apple has not said it will narrow what an app with Full Disk Access can read. It has said users will have to understand and affirmatively choose to give that access.

What to Watch

The key details are still missing: which macOS release brings the new controls, what the consent screen requires and whether apps that already hold the permission will have to ask again. Agent makers including Meta and OpenAI will need to adjust their Mac onboarding once Apple publishes those specifics, and developer documentation or a beta release would be the first place they appear.