# Apple Plans Stricter macOS Full Disk Access, Citing AI Agents

_Apple said on October 2, 2026 that it will add controls so an app can receive macOS Full Disk Access only through very explicit user action. It cites AI agents as a reason the risks of that access will grow. The post sets no release date._

By Johannes Keienburg, CEO & Founder  
Published: 2026-10-07  
Source: https://www.cakewalk.security/blog/apple-macos-full-disk-access-ai-agents

---

## Apple Wants a Backup-App Permission Harder to Grant

On October 2, 2026, Apple announced it will add controls to Full Disk Access, the macOS setting that largely sidesteps the system's [controls on private data](/glossary/access-control) so backup apps can function. Apple says some developers use it in ways that could put users at risk, exposing everything on a system, including files, mail, messages and browsing history, without users' full knowledge and understanding. It names AI agents as a reason the risk will grow. For access management, the setting matters because an agent inside an app that holds it works with whatever access that app has.

> Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action.

_Apple, Updates to Full Disk Access in macOS_

The two-paragraph post gives no release date, does not describe what the explicit action will look like and does not say whether access already granted changes. It refers to AI agents only as a category and names no specific agent or product.

## Apple Wants Users to Understand the Risk Before They Grant Access

Apple frames the problem as one of consent. It says the exposure happens without users' full knowledge and understanding, and that for communication apps it can also compromise the privacy of the people users are talking to. Its remedy is aimed at the moment of granting: Apple wants users to clearly understand the risks before granting such access. The post cites no incident. Coding agents that [posted internal screenshots to public GitHub repositories](/blog/coding-agents-internal-screenshots-public-github) did so on access each developer already held.

> As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.

_Apple, Updates to Full Disk Access in macOS_

That is a platform vendor's forecast, and the post gives no count to back it.

> An agent acts for a named person, and its access should stay at the least it needs. The MCP Gateway evaluates each governed call against policy before it runs and logs each allow, deny and escalate decision in one record. An agent whose actions stay on the device, such as reading local files, does not pass through it, so macOS permissions apply there.

_Comment from Gil Röder, CPO & Co-Founder_

Source: Apple, [Updates to Full Disk Access in macOS](https://developer.apple.com/news/?id=p6zjojqw), October 2, 2026.