Messages Bridge

io.github.IsaiahDupreePublished by GitHub account IsaiahDupreev1.3.0Updated Oct 24, 2026

MCP connector for iMessage & Contacts via a local Mac agent + Vercel relay

VerifiedStreamable HTTPWeb executableProductivity & WorkflowCommunication & Collaboration

Overview

AI-generated overview

Connector that lets ChatGPT search and send iMessage conversations and read or add Contacts through a small agent running on your own Mac.

What you can do
Search messages and list or page through recent conversations and threads, with status checks on local access and coverage without returning content. Send a single iMessage to one recipient, confirmed by you before it goes out. Search, read and create Contacts by name, phone or email. Reads run on your Mac; requests pass through a hosted relay that queues them briefly.
When to use it
Useful when you want an assistant to look up past iMessage conversations or contact details, or to draft and send a single text, while the message data stays on your own Mac. Requires a Mac that is awake and running the agent.
Requirements
A remote MCP endpoint with OAuth sign-in, an account on the hosted service, and a pairing code. A Mac with Node 18+ and Apple Command Line Tools running the apple-messages-agent CLI, granted Full Disk Access and Automation permission for Messages and Contacts. The Mac must stay awake with the agent running.
Before you install
The agent reads your full local message database and can send messages and add contacts; both write tools are marked destructive and need your confirmation, one recipient at a time. The hosted relay temporarily stores request and result payloads in short-lived queues, so message content leaves your Mac in transit. The agent token is kept in a local file; self-hosting needs Supabase and JWT secrets.

Installation

In SourceWeft

  1. Open Messages Bridge in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.IsaiahDupree%2Fmessages-bridge/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "messages-bridge": {
      "type": "http",
      "url": "https://messagesbridge.vercel.app/mcp"
    }
  }
}

README

💬 MessagesBridge

Use your iMessage & Contacts inside ChatGPT — through your own Mac.

[License: MIT] [npm]

MessagesBridge is a Model Context Protocol (MCP) connector that lets ChatGPT work with your iMessage conversations and Contacts. Reads execute on your own Mac through a small local agent. Requested results pass through the hosted relay and are returned to ChatGPT. The relay temporarily stores request/result payloads in its queue; it does not maintain a permanent copy of your message history.

  ChatGPT  ──OAuth──►  MessagesBridge relay  ──job queue──►  apple-messages-agent  ──►  Messages.app + Contacts (connector)          (Vercel, stateless)      (your Mac, polls & executes)        (on your Mac)

Your Mac is the only place your messages are ever read or contacts written. The relay stores only short-lived job payloads and your account record; it never sees a message unless a job is in flight, and queue payloads have short expiry windows.

For users — 3 steps

1. Create your account at messagesbridge.vercel.app and generate a pairing code.

2. Install the Mac agent (needs Node 18+ and Apple Command Line Tools):

bash
npx apple-messages-agent pair <YOUR-CODE>   # link this Mac to your accountnpx apple-messages-agent install            # keep it running on every restart

The agent needs two macOS permissions, granted once: Full Disk Access so it can read your message history (System Settings → Privacy & Security → Full Disk Access), and Automation the first time it sends a message or reads Contacts — macOS asks "Terminal wants to control Messages" and to access Contacts; click OK.

3. Connect ChatGPT: Settings → Plugins → turn on Developer mode (Security & login) → Create a custom plugin → paste the MCP Server URL https://messagesbridge.vercel.app/mcp → Authentication OAuth → sign in & Allow.

That's it. In a new chat: "Search my messages for the dinner plans" or "Text Sarah that I'm running 10 minutes late." (You confirm every send before it goes out.)

Your Mac must be awake with the agent running. npx apple-messages-agent install makes it start automatically at login and restart if it ever crashes.

Managing the agent

bash
npx apple-messages-agent status      # is it paired & reachable?npx apple-messages-agent logs        # recent activitynpx apple-messages-agent uninstall   # stop auto-start

What ChatGPT can do

ToolAction
search_messagesSearch plain and Apple attributed text; follow next_cursor even on empty result pages
list_recent_threadsList recent conversations, newest first, with a last-message preview
get_threadRead pages of one conversation using an exact chat id; pass next_cursor as cursor until null
messages_statusCheck local access, counts and coverage without returning message content
send_messageSend an iMessage to one recipient (you confirm first — no bulk)
search_contactsFind people by name (returns their phones + emails)
get_contactRead one contact by name or id
create_contactAdd a contact (name, optional phone/email)

Reads come first; the only write tools are send_message and create_contact, and each is confirmed by you in ChatGPT before it runs. Sends always go to one recipient at a time — never in bulk.

Self-hosting

You can run your own relay so nothing depends on the hosted instance.

Prereqs: a Vercel account and a Supabase project (free tiers are fine).

  1. Storage — in your Supabase project's SQL editor, run supabase/schema.sql. It creates isolated actp_messagesbridge_* tables and mb_* storage functions with RLS and service-role-only grants.
  2. Deploy the server/ directory to Vercel.
  3. Set env vars (see server/.env.example):
    • SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY — your project + service-role key
    • JWT_SECRET — openssl rand -hex 32
  4. Verify: curl https://YOUR-APP.vercel.app/api/health → redisConfigured, redisOk, jwtSecretSet all true.
  5. Point the agent at it: npx apple-messages-agent pair <CODE> --server https://YOUR-APP.vercel.app.

How it works

  • Auth — OAuth 2.1 with PKCE and Dynamic Client Registration (RFC 7591). ChatGPT registers itself, the user signs in on the MessagesBridge consent page, and ChatGPT gets a scoped MCP access token. JWTs are HMAC-signed; three kinds (session, agent, mcp) with distinct privileges. Optional email verification via Resend (RESEND_API_KEY); off unless configured, and enforcement is opt-in (REQUIRE_EMAIL_VERIFICATION).
  • Relay — MCP tool call → job pushed to jobs:<user> (TTL ≤ the caller's wait window, so an abandoned job can't run late) → the Mac agent (holding a hanging long-poll) is handed the job within ~200ms, executes it, pushes the result → the MCP handler returns it. The long-poll means jobs are delivered on arrival rather than on a fixed interval, so relay overhead is ~300ms instead of ~1s. The agent is considered "online" only while it's actively connected.
  • Agent — a dependency-free Node CLI. Read tools query the Messages chat.db directly (read-only SQLite); send and contact tools run via JXA (osascript -l JavaScript) against Messages.app and Contacts; arguments are passed as JSON over argv (never shell-interpolated). A macOS LaunchAgent keeps it alive across logins and crashes.

Repository layout

server/    Vercel functions: OAuth + MCP endpoint + relay        (deploy this)agent/     apple-messages-agent — the npm-published Mac CLI          (users npx this)kit/       Browser automations: register the dev-mode connector AND           fill the OpenAI directory submission (see kit/README.md)supabase/  schema.sql for self-hosting the storagetest/      end-to-end OAuth + MCP integration test

Development

bash
# servercd server && cp .env.example .env.local   # fill in, then: vercel dev# end-to-end test against a live deployment (reads ../.env.local)node test/e2e-oauth.mjs# agent unit testsnode --test agent/test-agent-unit.mjs

Security & privacy

  • Messages are read and sent, and contacts read and added, only on your Mac. The relay temporarily persists requested content in its job/result queues with short TTLs; results are consumed on delivery.
  • The agent token is stored at ~/.messagesbridge-agent.json (mode 600).
  • No secrets are committed; see .gitignore and the .env.example files.
  • Write tools are marked destructive so ChatGPT asks before it sends a message or adds a contact — every send goes to one confirmed recipient at a time, never in bulk.

License

MIT © Isaiah Dupree

Verified read coverage and live tests

Agent 1.1 reads the live SQLite WAL, decodes Apple attributed strings using macOS Foundation, and provides bounded cursor pagination. Cursors follow database insertion order. Attachment-only records remain visible through has_attachments; attachment files are not uploaded or decoded. The Mac database is the coverage boundary: this does not establish that every iPhone/iCloud message has synced.

sh
apple-messages-agent doctornode test/live-messages.mjs# After pairing your own account and starting the agent:MB_EMAIL=your-email MB_PASSWORD=your-password node test/live-relay.mjs

Provide credentials through your secure environment, not a shared transcript or committed file. The live tests only read and print aggregate results. live-messages checks every local conversation page, all messages in the largest thread, decoded search, and cursor validation. live-relay validates actual OAuth, MCP and paired-Mac reads; it fails if the Mac is offline. Reviewer/demo output is never accepted as evidence of a live integration.

Production requires the storage migration and valid Supabase configuration. /api/health returns HTTP 503 when storage is unavailable. If the old relay database is unavailable, accounts, pairing and OAuth sessions from it cannot be recovered automatically; sign in/create an owner account and reconnect the plugin.

Source: README.md at commit 0ecb5ed

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v1.3.0LatestSep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts