iCloud Drive Docs

io.github.js713-labPublished by GitHub account js713-labv0.1.0Updated Oct 24, 2026

Read-only MCP server for listing, searching, downloading, and reading iCloud Drive documents.

VerifiedSTDIODesktop onlyFiles & StorageKnowledge & Memory

Overview

AI-generated overview

Read-only local MCP server that lets an assistant list, search, download and extract text from iCloud Drive documents, including on non-Mac systems.

What you can do
List a folder in iCloud Drive, with an empty path meaning the root or the configured folder prefix, and check session health with the configured Apple ID and cache paths (never a password). Search Drive by filename or path, optionally filtered by extension, with capped results. Download Drive files into a local cache and return their paths rather than file bytes. Extract text from downloaded or cached pdf, docx, xlsx, txt and csv documents so the assistant can quote specific pages.
When to use it
Useful when an assistant needs to find and quote documents stored in iCloud Drive, such as locating an invoice and quoting a page, especially on Linux or Windows where the macOS-local Drive tooling is unavailable. Not intended for Mail, Calendar, Contacts or Notes, and it cannot upload, rename or delete.
Requirements
Runs locally over stdio as a Python 3.10+ package (pip install icloud-docs-mcp) or an MCPB bundle; desktop only. Requires ICLOUD_USERNAME set to an Apple ID, and a one-time interactive login in a real terminal (icloud-docs-mcp login) with password and possibly a 6-digit device code. Optional variables: ICLOUD_PASSWORD, ICLOUD_SESSION_DIR, ICLOUD_DOWNLOAD_DIR, ICLOUD_ROOT. Network access to iCloud is required.
Before you install
Uses the unofficial pyicloud client because Apple publishes no third-party iCloud Drive API; it can break when Apple changes endpoints, and use may conflict with Apple's terms. Cookiejar files are login credentials and must not be committed or shared; avoid putting ICLOUD_PASSWORD in the MCP environment. The status tool returns the Apple ID and local cache paths. Do not expose the server on the network. Downloads write files to a local cache.

Installation

In SourceWeft

  1. Open iCloud Drive Docs in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

icloud-docs-mcp

[iCloud Drive Docs — read-only MCP. List, Search, Download, Read.]

Your agent can find a PDF in iCloud Drive and quote page 3.

Read-only Model Context Protocol server for iCloud Drive. Linux, Windows, or macOS — no Mac, no Spotlight, no ~/Library required.

Source: js713-lab/icloud4u-mcp. The installable package and CLI are named icloud-docs-mcp.

Mail / Calendar / Contacts MCPs already exist. Drive is still the weak spot in the Apple stack if you are not on a Mac. That is the wedge: cross-platform Drive without needing a Mac. It is a utility, not a category.

It lists a folder, searches by filename, downloads files, and extracts text from common documents. There is no default Apple ID, no bundled documents, and no company-specific search logic.

Apple does not publish a third-party iCloud Drive API. This server uses the unofficial pyicloud library. You do not own that pipe. Apple can change an endpoint and this tool is down until someone reverse-engineers it again. Do not promise reliability this repo does not control.

Example:

Find the invoice in iCloud Drive and quote page 3.

What it is not

  • Not Mail, Calendar, Contacts, or Notes
  • Not a macOS-local Drive MCP (those already use Spotlight / ~/Library)
  • Not a hosted / HTTP MCP (it runs locally over stdio)
  • Not a 2FA prompt inside the model session
  • Not upload, rename, or delete
  • Not a reliability SLA. The unofficial client will break.

Disclaimer

This is not an Apple product. Apple does not publish a third-party iCloud Drive API. The unofficial client can break when Apple changes endpoints, and using it may conflict with Apple's terms. Use it at your own risk, locally, on an account you control.

Do not expose this server on the network. Cookiejar files are login credentials: never commit them, never paste them into issues, and never check in .env. See SECURITY.md.

The status tool returns the configured Apple ID and local cache paths so a client can tell whether login succeeded. It never returns a password.

Install

Python 3.10+

From this repository:

bash
git clone https://github.com/js713-lab/icloud4u-mcp.gitcd icloud4u-mcppython3 -m venv .venvsource .venv/bin/activatepip install -e .

Install from GitHub:

bash
pip install git+https://github.com/js713-lab/icloud4u-mcp.git

Or, once the package is on PyPI:

bash
pip install icloud-docs-mcp

Copy .env.example to .env and set ICLOUD_USERNAME to your Apple ID. .env is gitignored.

bash
cp .env.example .env

Login (required once)

The MCP process will not wait for a 2FA code. Log in in a real terminal:

bash
export ICLOUD_USERNAME='[email protected]'icloud-docs-mcp login

You will be prompted for the password and, if Apple asks, a 6-digit device code. A trusted cookiejar is stored under:

$XDG_DATA_HOME/icloud-docs-mcp/<sanitized-username>/

(~/.local/share/icloud-docs-mcp/... if XDG_DATA_HOME is unset.)

If a tool returns NEED_LOGIN or NEED_2FA, run icloud-docs-mcp login again, then retry.

bash
icloud-docs-mcp status

Tools

ToolPurpose
statusSession health. Returns the Apple ID and cache paths, never a password.
list_folderOne directory. Empty path is Drive root (or ICLOUD_ROOT).
searchFilename/path query, optional ext, capped results.
downloadCopy Drive files to the local cache. Returns paths, not bytes.
read_textDownload if needed; extract text from pdf, docx, xlsx, txt, csv.

Search and read_text are capped so MCP clients with a small result limit are not flooded.

Environment

VariableRequiredMeaning
ICLOUD_USERNAMEyesApple ID. No default.
ICLOUD_PASSWORDnoLogin CLI prompts if unset. Avoid putting this in the MCP env.
ICLOUD_SESSION_DIRnoCookiejar directory override.
ICLOUD_DOWNLOAD_DIRnoLocal download cache.
ICLOUD_ROOTnoDrive folder prefix; all tools are scoped under it.

MCP clients

Default command (no args) speaks MCP on stdio:

bash
icloud-docs-mcp

Grok

toml
[mcp_servers.icloud_docs]command = "icloud-docs-mcp"env = { ICLOUD_USERNAME = "${ICLOUD_USERNAME}" }startup_timeout_sec = 45tool_timeout_sec = 180tool_timeouts = { search = 180, download = 300, read_text = 180 }

Claude Desktop / Cursor

json
{  "mcpServers": {    "icloud-docs": {      "command": "icloud-docs-mcp",      "env": {        "ICLOUD_USERNAME": "<your-apple-id>"      }    }  }}

Use an absolute path to the venv binary if the client does not inherit your PATH.

Grok can also load .mcp.json from this repo:

bash
grok plugin install js713-lab/icloud4u-mcp --trust

That only starts the server. You still need pip install icloud-docs-mcp (or pip install -e .) and icloud-docs-mcp login on the machine.

To publish a release to PyPI and the official MCP Registry, see PUBLISH.md.

Development

bash
pip install -e ".[dev]"pytest

Tests mock Apple. CI must never log into iCloud. See CONTRIBUTING.md.

License

MIT. Security reports: SECURITY.md.


Maintained by CodeCrafter · contact [email protected].

Source: README.md at commit 1fdc95a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts