Apple to Tighten macOS Full Disk Access Controls Over AI Agent Risks

Apple says it plans to add new controls around macOS's Full Disk Access permission, warning that increasingly capable AI agents make broad access to users' files, messages, mail, and browsing history riskier.

Full Disk Access is one of the more sensitive privacy grants on macOS. Once an app holds it, the app can step around the system's usual isolation of personal data and read files and directories that are otherwise protected. Apple's long-standing assumption was that this power would be handed to tools the user explicitly trusts.

According to TechCrunch, the immediate driver behind the change is the rise of AI agents. Unlike single-purpose apps, agents often need to act autonomously across apps and directories, reaching a far wider set of data than conventional software. When an agent misjudges a task or is abused, an over-broad read may not surface to the user the way an ordinary permission pop-up would.

The direction is clear, but the public detail remains at the level of intent: Apple says the new controls will bring sharper boundaries and finer-grained management, while the exact interface and version timing have not been disclosed. What is already apparent is that agent-style tools leaning on Full Disk Access are likely to need a redesigned authorization and explanation flow.

For users, the trade-off cuts both ways. Tighter authorization limits what an agent can do, and it also asks people to decide more deliberately how much personal data a given program should see. That boundary between privacy and capability is being pulled at again by AI agents.

The part worth watching is implementation: how Apple will distinguish a "trusted agent" from an ordinary app, and how developers will adapt. The decision may also become a reference point for how other operating systems handle agent permissions.