Apple Restricts Mac 'Full Disk Access' Amid AI Agent Fears

Apple is tightening the requirements Mac apps must meet to obtain "Full Disk Access," citing the risks posed by AI agents. Reports from PCMag UK and Yellow.com point to the same change, framing it as a direct response to the rise of autonomous tools that can reach into a user's file system.

Full Disk Access is one of the highest-level privacy permissions in macOS. An app that holds it can read Mail, Messages, Safari history, Time Machine backups, and other data that is normally shielded by the operating system's sandbox.

Historically, the apps seeking this permission were mainly backup, security, and developer utilities. As AI agents capable of operating a Mac on a user's behalf have multiplied, the pool of applicants has widened — and Apple has evidently grown more cautious about how the permission is granted.

The practical effect is that developers now face a higher bar to secure Full Disk Access, and users may see clearer prompts or more stringent guidance during the authorization flow. The reports do not detail the exact technical rules, but the direction is unambiguous: system-level privacy is being recalibrated as agentic AI moves onto the desktop.

For Apple, this is a choice made under tension. AI agents are only genuinely useful when they can read local files, organize material, and act across applications. But handing the most powerful disk permission to an automated program also magnifies the damage if that agent is abused or compromised.

What to watch next is how the change is implemented — whether it arrives through a system update or through developer review policy — and whether third-party AI agents will end up governed by different authorization standards than Apple's own Apple Intelligence ecosystem. For developers and users alike, Full Disk Access on the Mac is shifting from a routine toggle into a frontline of the privacy debate in the age of AI agents.