x=hub

your toolset

    build deployment
    sign in

    apple-icloud-mcp

    mcpkey · package
    io.github.chrischall/apple-icloud-mcp · v0.3.6
    deploy just this

    Unofficial: Apple Music, iCloud Calendar/Contacts/Mail, Apple Maps and WeatherKit, no Mac needed

    run it

    on your own machines, one way per deploy method
    generated from the record, not tested yet
    # once, as root:
# as_mcp DIR COMMAND...: runs COMMAND as the mcp user in DIR, its home, sandboxed as the
# units are: a package's install scripts can write to DIR only, as the server later can
as_mcp() {
  local dir="$1"; shift
  systemd-run --quiet --wait --pipe --collect --uid=mcp --gid=mcp \
    -p WorkingDirectory="$dir" -p Environment=HOME="$dir" -p ReadWritePaths="$dir" \
    -p NoNewPrivileges=true -p ProtectSystem=strict -p ProtectHome=true -p PrivateTmp=true \
    -- "$@" </dev/null
}
install -d -m 0750 -o mcp -g mcp /var/lib/mcp/apple-icloud
# apple-icloud: its packages, installed whole before its unit starts (no session installs)
# npx takes a half-installed tree for installed: a rerun starts them afresh
systemctl stop mcp-my-agent-apple-icloud.service 2>/dev/null || true
as_mcp /var/lib/mcp/apple-icloud rm -rf /var/lib/mcp/apple-icloud/.npm/_npx
as_mcp /var/lib/mcp/apple-icloud npx --yes [email protected] -- true
as_mcp /var/lib/mcp/apple-icloud npx --yes --package=supergateway@4 -- true

#!/usr/bin/env bash
# apple-icloud (io.github.chrischall/apple-icloud-mcp), recipe baremetal (generated).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-apple-icloud.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp --stateful --host 127.0.0.1 --port 8101 --streamableHttpPath /mcp --healthEndpoint /healthz

[Unit]
Description=MCP server apple-icloud (toolset my-agent), generated by Hub
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mcp
Group=mcp
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/apple-icloud
WorkingDirectory=/var/lib/mcp/apple-icloud
ExecStart=/opt/mcp/my-agent/bin/apple-icloud.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/apple-icloud

[Install]
WantedBy=multi-user.target
    generated from the record, not tested yet
    docker run --rm -p 127.0.0.1:8101:8000 -e APPLE_TEAM_ID -e APPLE_KEY_ID -e APPLE_PRIVATE_KEY -e APPLE_PRIVATE_KEY_PATH -e APPLE_MUSIC_KEY_ID -e APPLE_MUSIC_PRIVATE_KEY -e APPLE_MAPS_KEY_ID -e APPLE_MAPS_PRIVATE_KEY -e APPLE_WEATHERKIT_KEY_ID -e APPLE_WEATHERKIT_PRIVATE_KEY -e APPLE_WEATHERKIT_SERVICE_ID -e APPLE_MUSIC_DEVELOPER_TOKEN -e APPLE_MUSIC_USER_TOKEN -e APPLE_MUSIC_WEB_USER_TOKEN -e APPLE_MUSIC_WEB_DEVELOPER_TOKEN -e APPLE_MUSIC_STOREFRONT -e ICLOUD_USERNAME -e ICLOUD_APP_PASSWORD -e ICLOUD_MAIL_ADDRESS -e ICLOUD_DEFAULT_CALENDAR -e APPLE_WRITE_MODE -e APPLE_SERVICES -e DISPLAY_TZ -e APPLE_UNITS -e APPLE_STATE_CACHE -e APPLE_REQUEST_TIMEOUT_MS -e APPLE_DEBUG_LOG -e MCP_CONFIRM_MODE -e MCP_CONFIRM_ELICITATION -e MCP_CONFIRM_TTL_SECONDS -e MCP_CONFIRM_SECRET node:22-alpine sh -c 'npx -y supergateway@4 --stdio '"'"'npx -y [email protected]'"'"' --outputTransport streamableHttp --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz'
    generated from the record, not tested yet
    # Generated by Hub for toolset "my-agent" (2026-10-18T17:19:02+00:00).
# Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
#   cp .env.example .env    # fill the ${VAR}s
#   docker compose up -d && bash smoke.sh
# Remote servers are not here: clients reach them directly (see clients/).
name: mcp-my-agent
services:
  apple-icloud:
    image: node:22-alpine
    command:
    - sh
    - -c
    - npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp --stateful
      --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
    ports:
    - 127.0.0.1:8101:8000
    volumes:
    - npm-cache:/root/.npm
    healthcheck:
      test:
      - CMD-SHELL
      - wget -qO- http://127.0.0.1:8000/healthz || exit 1
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 2m
    restart: unless-stopped
    environment:
      APPLE_TEAM_ID: ${APPLE_TEAM_ID}
      APPLE_KEY_ID: ${APPLE_KEY_ID}
      APPLE_PRIVATE_KEY: ${APPLE_PRIVATE_KEY}
      APPLE_PRIVATE_KEY_PATH: ${APPLE_PRIVATE_KEY_PATH}
      APPLE_MUSIC_KEY_ID: ${APPLE_MUSIC_KEY_ID}
      APPLE_MUSIC_PRIVATE_KEY: ${APPLE_MUSIC_PRIVATE_KEY}
      APPLE_MAPS_KEY_ID: ${APPLE_MAPS_KEY_ID}
      APPLE_MAPS_PRIVATE_KEY: ${APPLE_MAPS_PRIVATE_KEY}
      APPLE_WEATHERKIT_KEY_ID: ${APPLE_WEATHERKIT_KEY_ID}
      APPLE_WEATHERKIT_PRIVATE_KEY: ${APPLE_WEATHERKIT_PRIVATE_KEY}
      APPLE_WEATHERKIT_SERVICE_ID: ${APPLE_WEATHERKIT_SERVICE_ID}
      APPLE_MUSIC_DEVELOPER_TOKEN: ${APPLE_MUSIC_DEVELOPER_TOKEN}
      APPLE_MUSIC_USER_TOKEN: ${APPLE_MUSIC_USER_TOKEN}
      APPLE_MUSIC_WEB_USER_TOKEN: ${APPLE_MUSIC_WEB_USER_TOKEN}
      APPLE_MUSIC_WEB_DEVELOPER_TOKEN: ${APPLE_MUSIC_WEB_DEVELOPER_TOKEN}
      APPLE_MUSIC_STOREFRONT: ${APPLE_MUSIC_STOREFRONT}
      ICLOUD_USERNAME: ${ICLOUD_USERNAME}
      ICLOUD_APP_PASSWORD: ${ICLOUD_APP_PASSWORD}
      ICLOUD_MAIL_ADDRESS: ${ICLOUD_MAIL_ADDRESS}
      ICLOUD_DEFAULT_CALENDAR: ${ICLOUD_DEFAULT_CALENDAR}
      APPLE_WRITE_MODE: ${APPLE_WRITE_MODE}
      APPLE_SERVICES: ${APPLE_SERVICES}
      DISPLAY_TZ: ${DISPLAY_TZ}
      APPLE_UNITS: ${APPLE_UNITS}
      APPLE_STATE_CACHE: ${APPLE_STATE_CACHE}
      APPLE_REQUEST_TIMEOUT_MS: ${APPLE_REQUEST_TIMEOUT_MS}
      APPLE_DEBUG_LOG: ${APPLE_DEBUG_LOG}
      MCP_CONFIRM_MODE: ${MCP_CONFIRM_MODE}
      MCP_CONFIRM_ELICITATION: ${MCP_CONFIRM_ELICITATION}
      MCP_CONFIRM_TTL_SECONDS: ${MCP_CONFIRM_TTL_SECONDS}
      MCP_CONFIRM_SECRET: ${MCP_CONFIRM_SECRET}
volumes:
  npm-cache: {}
  uv-cache: {}
    generated from the record, not tested yet
    # Generated by Hub for toolset "my-agent" (2026-10-18T17:19:02+00:00).
#   kubectl create namespace mcp
#   kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
#   kubectl apply -f kubernetes.yaml
# Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
# with auth in front before exposing any of them.
apiVersion: v1
kind: Namespace
metadata:
  name: mcp
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: apple-icloud
  namespace: mcp
  labels: &id001
    app: apple-icloud
spec:
  replicas: 1
  selector:
    matchLabels: *id001
  template:
    metadata:
      labels: *id001
    spec:
      containers:
      - name: apple-icloud
        image: node:22-alpine
        ports:
        - containerPort: 8000
          name: http
        env:
        - name: APPLE_TEAM_ID
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_TEAM_ID
        - name: APPLE_KEY_ID
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_KEY_ID
        - name: APPLE_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_PRIVATE_KEY
        - name: APPLE_PRIVATE_KEY_PATH
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_PRIVATE_KEY_PATH
        - name: APPLE_MUSIC_KEY_ID
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MUSIC_KEY_ID
        - name: APPLE_MUSIC_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MUSIC_PRIVATE_KEY
        - name: APPLE_MAPS_KEY_ID
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MAPS_KEY_ID
        - name: APPLE_MAPS_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MAPS_PRIVATE_KEY
        - name: APPLE_WEATHERKIT_KEY_ID
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_WEATHERKIT_KEY_ID
        - name: APPLE_WEATHERKIT_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_WEATHERKIT_PRIVATE_KEY
        - name: APPLE_WEATHERKIT_SERVICE_ID
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_WEATHERKIT_SERVICE_ID
        - name: APPLE_MUSIC_DEVELOPER_TOKEN
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MUSIC_DEVELOPER_TOKEN
        - name: APPLE_MUSIC_USER_TOKEN
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MUSIC_USER_TOKEN
        - name: APPLE_MUSIC_WEB_USER_TOKEN
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MUSIC_WEB_USER_TOKEN
        - name: APPLE_MUSIC_WEB_DEVELOPER_TOKEN
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MUSIC_WEB_DEVELOPER_TOKEN
        - name: APPLE_MUSIC_STOREFRONT
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_MUSIC_STOREFRONT
        - name: ICLOUD_USERNAME
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: ICLOUD_USERNAME
        - name: ICLOUD_APP_PASSWORD
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: ICLOUD_APP_PASSWORD
        - name: ICLOUD_MAIL_ADDRESS
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: ICLOUD_MAIL_ADDRESS
        - name: ICLOUD_DEFAULT_CALENDAR
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: ICLOUD_DEFAULT_CALENDAR
        - name: APPLE_WRITE_MODE
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_WRITE_MODE
        - name: APPLE_SERVICES
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_SERVICES
        - name: DISPLAY_TZ
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: DISPLAY_TZ
        - name: APPLE_UNITS
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_UNITS
        - name: APPLE_STATE_CACHE
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_STATE_CACHE
        - name: APPLE_REQUEST_TIMEOUT_MS
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_REQUEST_TIMEOUT_MS
        - name: APPLE_DEBUG_LOG
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: APPLE_DEBUG_LOG
        - name: MCP_CONFIRM_MODE
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: MCP_CONFIRM_MODE
        - name: MCP_CONFIRM_ELICITATION
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: MCP_CONFIRM_ELICITATION
        - name: MCP_CONFIRM_TTL_SECONDS
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: MCP_CONFIRM_TTL_SECONDS
        - name: MCP_CONFIRM_SECRET
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: MCP_CONFIRM_SECRET
        args:
        - sh
        - -c
        - npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp
          --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
        readinessProbe:
          httpGet:
            path: /healthz
            port: http
          initialDelaySeconds: 10
---
apiVersion: v1
kind: Service
metadata:
  name: apple-icloud
  namespace: mcp
spec:
  selector:
    app: apple-icloud
  ports:
  - port: 8000
    targetPort: http
    name: http
    generated from the record, not tested yet
    # Generated by Hub for toolset "my-agent" (2026-10-18T17:19:02+00:00).
# Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
# Each server under `servers` is one Deployment + Service; the keys after it configure
# upstream charts a worker verified.
servers:
  apple-icloud:
    enabled: true
    replicas: 1
    port: 8000
    path: /mcp
    container:
      name: apple-icloud
      image: node:22-alpine
      ports:
      - containerPort: 8000
        name: http
      env:
      - name: APPLE_TEAM_ID
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_TEAM_ID
      - name: APPLE_KEY_ID
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_KEY_ID
      - name: APPLE_PRIVATE_KEY
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_PRIVATE_KEY
      - name: APPLE_PRIVATE_KEY_PATH
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_PRIVATE_KEY_PATH
      - name: APPLE_MUSIC_KEY_ID
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MUSIC_KEY_ID
      - name: APPLE_MUSIC_PRIVATE_KEY
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MUSIC_PRIVATE_KEY
      - name: APPLE_MAPS_KEY_ID
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MAPS_KEY_ID
      - name: APPLE_MAPS_PRIVATE_KEY
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MAPS_PRIVATE_KEY
      - name: APPLE_WEATHERKIT_KEY_ID
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_WEATHERKIT_KEY_ID
      - name: APPLE_WEATHERKIT_PRIVATE_KEY
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_WEATHERKIT_PRIVATE_KEY
      - name: APPLE_WEATHERKIT_SERVICE_ID
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_WEATHERKIT_SERVICE_ID
      - name: APPLE_MUSIC_DEVELOPER_TOKEN
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MUSIC_DEVELOPER_TOKEN
      - name: APPLE_MUSIC_USER_TOKEN
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MUSIC_USER_TOKEN
      - name: APPLE_MUSIC_WEB_USER_TOKEN
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MUSIC_WEB_USER_TOKEN
      - name: APPLE_MUSIC_WEB_DEVELOPER_TOKEN
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MUSIC_WEB_DEVELOPER_TOKEN
      - name: APPLE_MUSIC_STOREFRONT
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_MUSIC_STOREFRONT
      - name: ICLOUD_USERNAME
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: ICLOUD_USERNAME
      - name: ICLOUD_APP_PASSWORD
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: ICLOUD_APP_PASSWORD
      - name: ICLOUD_MAIL_ADDRESS
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: ICLOUD_MAIL_ADDRESS
      - name: ICLOUD_DEFAULT_CALENDAR
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: ICLOUD_DEFAULT_CALENDAR
      - name: APPLE_WRITE_MODE
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_WRITE_MODE
      - name: APPLE_SERVICES
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_SERVICES
      - name: DISPLAY_TZ
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: DISPLAY_TZ
      - name: APPLE_UNITS
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_UNITS
      - name: APPLE_STATE_CACHE
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_STATE_CACHE
      - name: APPLE_REQUEST_TIMEOUT_MS
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_REQUEST_TIMEOUT_MS
      - name: APPLE_DEBUG_LOG
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: APPLE_DEBUG_LOG
      - name: MCP_CONFIRM_MODE
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: MCP_CONFIRM_MODE
      - name: MCP_CONFIRM_ELICITATION
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: MCP_CONFIRM_ELICITATION
      - name: MCP_CONFIRM_TTL_SECONDS
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: MCP_CONFIRM_TTL_SECONDS
      - name: MCP_CONFIRM_SECRET
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: MCP_CONFIRM_SECRET
      args:
      - sh
      - -c
      - npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp
        --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
      readinessProbe:
        httpGet:
          path: /healthz
          port: http
        initialDelaySeconds: 10

# helm install my-agent helm/my-agent -n mcp

    in the cloud

    one click: the provider's deploy form opens filled in, in your own account
    koyeb
    deploy to koyeb

    The form opens with CHANGE_ME for each value you supply: APPLE_TEAM_ID, APPLE_KEY_ID, APPLE_PRIVATE_KEY, APPLE_PRIVATE_KEY_PATH, APPLE_MUSIC_KEY_ID, APPLE_MUSIC_PRIVATE_KEY, APPLE_MAPS_KEY_ID, APPLE_MAPS_PRIVATE_KEY, APPLE_WEATHERKIT_KEY_ID, APPLE_WEATHERKIT_PRIVATE_KEY, APPLE_WEATHERKIT_SERVICE_ID, APPLE_MUSIC_DEVELOPER_TOKEN, APPLE_MUSIC_USER_TOKEN, APPLE_MUSIC_WEB_USER_TOKEN, APPLE_MUSIC_WEB_DEVELOPER_TOKEN, APPLE_MUSIC_STOREFRONT, ICLOUD_USERNAME, ICLOUD_APP_PASSWORD, ICLOUD_MAIL_ADDRESS, ICLOUD_DEFAULT_CALENDAR, APPLE_WRITE_MODE, APPLE_SERVICES, DISPLAY_TZ, APPLE_UNITS, APPLE_STATE_CACHE, APPLE_REQUEST_TIMEOUT_MS, APPLE_DEBUG_LOG, MCP_CONFIRM_MODE, MCP_CONFIRM_ELICITATION, MCP_CONFIRM_TTL_SECONDS, MCP_CONFIRM_SECRET. Fill them in before you deploy.

    Clients connect to the service's https://…koyeb.app address plus /mcp.

    azure
    deploy to azuretemplate

    A Container Apps environment with one app per server, each with HTTPS ingress and one replica. The portal asks for each value you supply as a secure parameter; the deployment's outputs list the endpoints.

    connect to it

    copy what your client needs
    npx -y [email protected]
# env: APPLE_TEAM_ID, APPLE_KEY_ID, APPLE_PRIVATE_KEY, APPLE_PRIVATE_KEY_PATH, APPLE_MUSIC_KEY_ID, APPLE_MUSIC_PRIVATE_KEY, APPLE_MAPS_KEY_ID, APPLE_MAPS_PRIVATE_KEY, APPLE_WEATHERKIT_KEY_ID, APPLE_WEATHERKIT_PRIVATE_KEY, APPLE_WEATHERKIT_SERVICE_ID, APPLE_MUSIC_DEVELOPER_TOKEN, APPLE_MUSIC_USER_TOKEN, APPLE_MUSIC_WEB_USER_TOKEN, APPLE_MUSIC_WEB_DEVELOPER_TOKEN, APPLE_MUSIC_STOREFRONT, ICLOUD_USERNAME, ICLOUD_APP_PASSWORD, ICLOUD_MAIL_ADDRESS, ICLOUD_DEFAULT_CALENDAR, APPLE_WRITE_MODE, APPLE_SERVICES, DISPLAY_TZ, APPLE_UNITS, APPLE_STATE_CACHE, APPLE_REQUEST_TIMEOUT_MS, APPLE_DEBUG_LOG, MCP_CONFIRM_MODE, MCP_CONFIRM_ELICITATION, MCP_CONFIRM_TTL_SECONDS, MCP_CONFIRM_SECRET
    {
  "mcpServers": {
    "apple-icloud": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "APPLE_TEAM_ID": "${APPLE_TEAM_ID}",
        "APPLE_KEY_ID": "${APPLE_KEY_ID}",
        "APPLE_PRIVATE_KEY": "${APPLE_PRIVATE_KEY}",
        "APPLE_PRIVATE_KEY_PATH": "${APPLE_PRIVATE_KEY_PATH}",
        "APPLE_MUSIC_KEY_ID": "${APPLE_MUSIC_KEY_ID}",
        "APPLE_MUSIC_PRIVATE_KEY": "${APPLE_MUSIC_PRIVATE_KEY}",
        "APPLE_MAPS_KEY_ID": "${APPLE_MAPS_KEY_ID}",
        "APPLE_MAPS_PRIVATE_KEY": "${APPLE_MAPS_PRIVATE_KEY}",
        "APPLE_WEATHERKIT_KEY_ID": "${APPLE_WEATHERKIT_KEY_ID}",
        "APPLE_WEATHERKIT_PRIVATE_KEY": "${APPLE_WEATHERKIT_PRIVATE_KEY}",
        "APPLE_WEATHERKIT_SERVICE_ID": "${APPLE_WEATHERKIT_SERVICE_ID}",
        "APPLE_MUSIC_DEVELOPER_TOKEN": "${APPLE_MUSIC_DEVELOPER_TOKEN}",
        "APPLE_MUSIC_USER_TOKEN": "${APPLE_MUSIC_USER_TOKEN}",
        "APPLE_MUSIC_WEB_USER_TOKEN": "${APPLE_MUSIC_WEB_USER_TOKEN}",
        "APPLE_MUSIC_WEB_DEVELOPER_TOKEN": "${APPLE_MUSIC_WEB_DEVELOPER_TOKEN}",
        "APPLE_MUSIC_STOREFRONT": "${APPLE_MUSIC_STOREFRONT}",
        "ICLOUD_USERNAME": "${ICLOUD_USERNAME}",
        "ICLOUD_APP_PASSWORD": "${ICLOUD_APP_PASSWORD}",
        "ICLOUD_MAIL_ADDRESS": "${ICLOUD_MAIL_ADDRESS}",
        "ICLOUD_DEFAULT_CALENDAR": "${ICLOUD_DEFAULT_CALENDAR}",
        "APPLE_WRITE_MODE": "${APPLE_WRITE_MODE}",
        "APPLE_SERVICES": "${APPLE_SERVICES}",
        "DISPLAY_TZ": "${DISPLAY_TZ}",
        "APPLE_UNITS": "${APPLE_UNITS}",
        "APPLE_STATE_CACHE": "${APPLE_STATE_CACHE}",
        "APPLE_REQUEST_TIMEOUT_MS": "${APPLE_REQUEST_TIMEOUT_MS}",
        "APPLE_DEBUG_LOG": "${APPLE_DEBUG_LOG}",
        "MCP_CONFIRM_MODE": "${MCP_CONFIRM_MODE}",
        "MCP_CONFIRM_ELICITATION": "${MCP_CONFIRM_ELICITATION}",
        "MCP_CONFIRM_TTL_SECONDS": "${MCP_CONFIRM_TTL_SECONDS}",
        "MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
      }
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add apple-icloud -e "APPLE_TEAM_ID=${APPLE_TEAM_ID}" -e "APPLE_KEY_ID=${APPLE_KEY_ID}" -e "APPLE_PRIVATE_KEY=${APPLE_PRIVATE_KEY}" -e "APPLE_PRIVATE_KEY_PATH=${APPLE_PRIVATE_KEY_PATH}" -e "APPLE_MUSIC_KEY_ID=${APPLE_MUSIC_KEY_ID}" -e "APPLE_MUSIC_PRIVATE_KEY=${APPLE_MUSIC_PRIVATE_KEY}" -e "APPLE_MAPS_KEY_ID=${APPLE_MAPS_KEY_ID}" -e "APPLE_MAPS_PRIVATE_KEY=${APPLE_MAPS_PRIVATE_KEY}" -e "APPLE_WEATHERKIT_KEY_ID=${APPLE_WEATHERKIT_KEY_ID}" -e "APPLE_WEATHERKIT_PRIVATE_KEY=${APPLE_WEATHERKIT_PRIVATE_KEY}" -e "APPLE_WEATHERKIT_SERVICE_ID=${APPLE_WEATHERKIT_SERVICE_ID}" -e "APPLE_MUSIC_DEVELOPER_TOKEN=${APPLE_MUSIC_DEVELOPER_TOKEN}" -e "APPLE_MUSIC_USER_TOKEN=${APPLE_MUSIC_USER_TOKEN}" -e "APPLE_MUSIC_WEB_USER_TOKEN=${APPLE_MUSIC_WEB_USER_TOKEN}" -e "APPLE_MUSIC_WEB_DEVELOPER_TOKEN=${APPLE_MUSIC_WEB_DEVELOPER_TOKEN}" -e "APPLE_MUSIC_STOREFRONT=${APPLE_MUSIC_STOREFRONT}" -e "ICLOUD_USERNAME=${ICLOUD_USERNAME}" -e "ICLOUD_APP_PASSWORD=${ICLOUD_APP_PASSWORD}" -e "ICLOUD_MAIL_ADDRESS=${ICLOUD_MAIL_ADDRESS}" -e "ICLOUD_DEFAULT_CALENDAR=${ICLOUD_DEFAULT_CALENDAR}" -e "APPLE_WRITE_MODE=${APPLE_WRITE_MODE}" -e "APPLE_SERVICES=${APPLE_SERVICES}" -e "DISPLAY_TZ=${DISPLAY_TZ}" -e "APPLE_UNITS=${APPLE_UNITS}" -e "APPLE_STATE_CACHE=${APPLE_STATE_CACHE}" -e "APPLE_REQUEST_TIMEOUT_MS=${APPLE_REQUEST_TIMEOUT_MS}" -e "APPLE_DEBUG_LOG=${APPLE_DEBUG_LOG}" -e "MCP_CONFIRM_MODE=${MCP_CONFIRM_MODE}" -e "MCP_CONFIRM_ELICITATION=${MCP_CONFIRM_ELICITATION}" -e "MCP_CONFIRM_TTL_SECONDS=${MCP_CONFIRM_TTL_SECONDS}" -e "MCP_CONFIRM_SECRET=${MCP_CONFIRM_SECRET}" -- npx -y [email protected]

    {
  "mcpServers": {
    "apple-icloud": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "APPLE_TEAM_ID": "${APPLE_TEAM_ID}",
        "APPLE_KEY_ID": "${APPLE_KEY_ID}",
        "APPLE_PRIVATE_KEY": "${APPLE_PRIVATE_KEY}",
        "APPLE_PRIVATE_KEY_PATH": "${APPLE_PRIVATE_KEY_PATH}",
        "APPLE_MUSIC_KEY_ID": "${APPLE_MUSIC_KEY_ID}",
        "APPLE_MUSIC_PRIVATE_KEY": "${APPLE_MUSIC_PRIVATE_KEY}",
        "APPLE_MAPS_KEY_ID": "${APPLE_MAPS_KEY_ID}",
        "APPLE_MAPS_PRIVATE_KEY": "${APPLE_MAPS_PRIVATE_KEY}",
        "APPLE_WEATHERKIT_KEY_ID": "${APPLE_WEATHERKIT_KEY_ID}",
        "APPLE_WEATHERKIT_PRIVATE_KEY": "${APPLE_WEATHERKIT_PRIVATE_KEY}",
        "APPLE_WEATHERKIT_SERVICE_ID": "${APPLE_WEATHERKIT_SERVICE_ID}",
        "APPLE_MUSIC_DEVELOPER_TOKEN": "${APPLE_MUSIC_DEVELOPER_TOKEN}",
        "APPLE_MUSIC_USER_TOKEN": "${APPLE_MUSIC_USER_TOKEN}",
        "APPLE_MUSIC_WEB_USER_TOKEN": "${APPLE_MUSIC_WEB_USER_TOKEN}",
        "APPLE_MUSIC_WEB_DEVELOPER_TOKEN": "${APPLE_MUSIC_WEB_DEVELOPER_TOKEN}",
        "APPLE_MUSIC_STOREFRONT": "${APPLE_MUSIC_STOREFRONT}",
        "ICLOUD_USERNAME": "${ICLOUD_USERNAME}",
        "ICLOUD_APP_PASSWORD": "${ICLOUD_APP_PASSWORD}",
        "ICLOUD_MAIL_ADDRESS": "${ICLOUD_MAIL_ADDRESS}",
        "ICLOUD_DEFAULT_CALENDAR": "${ICLOUD_DEFAULT_CALENDAR}",
        "APPLE_WRITE_MODE": "${APPLE_WRITE_MODE}",
        "APPLE_SERVICES": "${APPLE_SERVICES}",
        "DISPLAY_TZ": "${DISPLAY_TZ}",
        "APPLE_UNITS": "${APPLE_UNITS}",
        "APPLE_STATE_CACHE": "${APPLE_STATE_CACHE}",
        "APPLE_REQUEST_TIMEOUT_MS": "${APPLE_REQUEST_TIMEOUT_MS}",
        "APPLE_DEBUG_LOG": "${APPLE_DEBUG_LOG}",
        "MCP_CONFIRM_MODE": "${MCP_CONFIRM_MODE}",
        "MCP_CONFIRM_ELICITATION": "${MCP_CONFIRM_ELICITATION}",
        "MCP_CONFIRM_TTL_SECONDS": "${MCP_CONFIRM_TTL_SECONDS}",
        "MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
      }
    }
  }
}
    {
  "servers": {
    "apple-icloud": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "APPLE_TEAM_ID": "${APPLE_TEAM_ID}",
        "APPLE_KEY_ID": "${APPLE_KEY_ID}",
        "APPLE_PRIVATE_KEY": "${APPLE_PRIVATE_KEY}",
        "APPLE_PRIVATE_KEY_PATH": "${APPLE_PRIVATE_KEY_PATH}",
        "APPLE_MUSIC_KEY_ID": "${APPLE_MUSIC_KEY_ID}",
        "APPLE_MUSIC_PRIVATE_KEY": "${APPLE_MUSIC_PRIVATE_KEY}",
        "APPLE_MAPS_KEY_ID": "${APPLE_MAPS_KEY_ID}",
        "APPLE_MAPS_PRIVATE_KEY": "${APPLE_MAPS_PRIVATE_KEY}",
        "APPLE_WEATHERKIT_KEY_ID": "${APPLE_WEATHERKIT_KEY_ID}",
        "APPLE_WEATHERKIT_PRIVATE_KEY": "${APPLE_WEATHERKIT_PRIVATE_KEY}",
        "APPLE_WEATHERKIT_SERVICE_ID": "${APPLE_WEATHERKIT_SERVICE_ID}",
        "APPLE_MUSIC_DEVELOPER_TOKEN": "${APPLE_MUSIC_DEVELOPER_TOKEN}",
        "APPLE_MUSIC_USER_TOKEN": "${APPLE_MUSIC_USER_TOKEN}",
        "APPLE_MUSIC_WEB_USER_TOKEN": "${APPLE_MUSIC_WEB_USER_TOKEN}",
        "APPLE_MUSIC_WEB_DEVELOPER_TOKEN": "${APPLE_MUSIC_WEB_DEVELOPER_TOKEN}",
        "APPLE_MUSIC_STOREFRONT": "${APPLE_MUSIC_STOREFRONT}",
        "ICLOUD_USERNAME": "${ICLOUD_USERNAME}",
        "ICLOUD_APP_PASSWORD": "${ICLOUD_APP_PASSWORD}",
        "ICLOUD_MAIL_ADDRESS": "${ICLOUD_MAIL_ADDRESS}",
        "ICLOUD_DEFAULT_CALENDAR": "${ICLOUD_DEFAULT_CALENDAR}",
        "APPLE_WRITE_MODE": "${APPLE_WRITE_MODE}",
        "APPLE_SERVICES": "${APPLE_SERVICES}",
        "DISPLAY_TZ": "${DISPLAY_TZ}",
        "APPLE_UNITS": "${APPLE_UNITS}",
        "APPLE_STATE_CACHE": "${APPLE_STATE_CACHE}",
        "APPLE_REQUEST_TIMEOUT_MS": "${APPLE_REQUEST_TIMEOUT_MS}",
        "APPLE_DEBUG_LOG": "${APPLE_DEBUG_LOG}",
        "MCP_CONFIRM_MODE": "${MCP_CONFIRM_MODE}",
        "MCP_CONFIRM_ELICITATION": "${MCP_CONFIRM_ELICITATION}",
        "MCP_CONFIRM_TTL_SECONDS": "${MCP_CONFIRM_TTL_SECONDS}",
        "MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
      }
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.chrischall/apple-icloud-mcp
    • not probed yet: tools unpinned, ingest lists them

    tools

    Not probed yetThe tools appear once the hub or its worker has listed this entry. Running it still works: your client lists them on first start.