Apple Restricts macOS Full Disk Access to Mitigate AI Agent Security Risks
Context that changes how you build, even if there's nothing to install.
On October 2, 2026, Apple announced plans to restrict 'Full Disk Access' in macOS to prevent autonomous AI agents from accessing sensitive user data without explicit authorization.
Developers building local agents must now design for 'least privilege' file access or face significant user friction during installation.
This is the 'App Tracking Transparency' moment for AI agents, where the OS provider reclaims the gatekeeper role to prevent silent data harvesting. It will likely break many current 'read-all' agent implementations but improves the long-term security of local LLM usage.
The release of specific Apple APIs that allow agents to request access to single folders rather than the entire disk.
Also covers
- Apple Restricts Mac Full Disk Access Due to AI Agent RisksApple has announced it will add new limits to the 'Full Disk Access' permission on macOS. The move is a response to the 'extraordinary' level of risk posed by AI agents that can browse, read, and interpret vast amounts of user mail, messages, and files autonomously.
- Developers must shift from broad system permissions to task-specific file access to avoid permission friction.
- Autonomous agents relying on global read access will face increased authorization hurdles.
- Apple is prioritizing user privacy and data security as a direct response to the rise of autonomous AI.
Multiple credible technology reporting sources confirm that Apple is increasing restrictions on macOS disk access specifically to address security risks associated with autonomous AI agents.
While Apple is tightening controls, some researchers argue that sandboxing alone is insufficient to contain advanced rogue agents.