Claude and iMessage: what's official and what's not (2026)
Can Claude read and send your iMessages? What Anthropic officially offers on iPhone and Mac, what community MCP servers do, and the Full Disk Access risk.
The short answer
- Anthropic offers three official ways to use Claude with iMessage as of October 2026: the iPhone app drafts new texts for you to send, a Claude Desktop extension reads and sends iMessages on a Mac, and Claude Code has an iMessage channel in research preview.
- The Claude iPhone app doesn't read your existing messages; it only writes new ones, and you tap send in Messages.
- iMessage MCP servers and bridge apps in online directories are made by independent developers, not Anthropic, and Anthropic says it can't verify that third-party tools work as intended or won't change.
- Anything that reads your Messages history from the chat.db file needs Full Disk Access, which macOS grants to the whole app running it, not just to one file.
- None of these read your WhatsApp, Telegram or Instagram chats on a Mac. Tera Chat for Mac can use your own Claude API key to draft iMessage, WhatsApp and Telegram replies that you send yourself.
Yes, Claude works with iMessage, and as of October 2026 Anthropic officially offers three ways: the Claude iPhone app drafts a new text and hands it to Messages for you to send, a Claude Desktop extension called Read and Send iMessages reads and sends messages on a Mac, and Claude Code has an iMessage channel in research preview. Everything else you’ll find (iMessage MCP servers, plugins and bridge apps in online directories) is made by independent developers, not Anthropic, and any of them that reads your history needs Full Disk Access, which opens far more than your messages.
Below: what each official option does and needs, how community tools differ, what giving a tool access to your Messages database actually means, and how to fix the common “not working” errors. We checked every claim against Anthropic’s and Apple’s own pages on 20 October 2026; this area changes quickly, so check the dates.
Claude and iMessage: official vs community (checked 20 October 2026)
| Option | Made by | Reads your messages? | Sends? | Where it runs | What it needs |
|---|---|---|---|---|---|
| Claude app on iPhone | Anthropic | No, it only writes new ones | You tap send in Messages | iPhone | Any Claude plan, no permissions |
| Read and Send iMessages extension | Anthropic | Yes, and can summarize recent messages | Yes | Claude Desktop on a Mac | macOS permission prompts for Messages and Contacts |
| Claude Code iMessage channel (research preview) | Anthropic | Yes, straight from the Messages database | Replies through Messages | Claude Code on a Mac | A Pro, Max, Team or Enterprise plan or a Console account; Full Disk Access; Bun |
| Community iMessage MCP servers and bridge apps | Independent developers | Depends on the tool | Depends on the tool | Mac | Full Disk Access for any tool that reads your history |
| ChatGPT’s Apple Messages plugin (for comparison) | OpenAI | Yes | By default, after you approve each message | ChatGPT Mac app, in Codex and ChatGPT Work (OpenAI) | Apple silicon Mac |
Claude on iPhone: drafts only
The Claude iPhone app can “draft and send messages through the Messages app or any messaging platform like WhatsApp, Slack, or Messenger”, on every plan and without granting any permissions (Anthropic). Claude shows a preview card; you tap it, Messages opens with the text filled in, and you send it yourself.
What it can’t do is read. Anthropic says plainly: “Claude does not read existing messages or emails, only creates new content.” So you can’t ask the iPhone app to summarize a group chat or answer “when did Sam say the flight lands”. That’s what the Mac options are for.
Claude Desktop on a Mac: the Read and Send iMessages extension
Anthropic’s connector directory lists Read and Send iMessages as “Made by Anthropic” and Anthropic-verified, added in March 2026 (Claude connectors). It lets Claude in the Claude Desktop app send iMessages, read them, search your contacts and fetch unread messages, so you can ask it to summarize your recent messages or draft and send a reply.
To install it:
- Open Claude Desktop on your Mac and go to Settings → Extensions.
- Click Browse extensions and find Read and Send iMessages (Anthropic).
- Install it, then approve the macOS security prompts when Claude first tries to reach Messages or Contacts.
Anthropic’s listing says the extension “uses macOS automation features” and asks for your permission through macOS security prompts before it touches Messages or Contacts. It runs on your Mac, but the messages Claude reads become part of your conversation with Claude and are processed by Anthropic’s models, like anything else you paste into a chat.
Claude Code: the iMessage channel (research preview)
Claude Code, Anthropic’s coding tool that runs in your terminal, has channels: plugins that let you message a running Claude Code session from your phone. iMessage is one of the included channels, alongside Telegram and Discord, and the feature is in research preview (Claude Code docs). The plugin is listed as made by Anthropic (Claude plugins).
It’s mainly built for texting your own Claude Code session from your iPhone: you text yourself, and Claude Code on your Mac reads the message and replies in the same thread. Texts from anyone else are ignored unless you add them. According to Anthropic’s docs and the plugin’s README (GitHub):
- It “reads your Messages database directly and sends replies through AppleScript”, so it needs macOS and Full Disk Access.
- It needs Claude Code with a Pro, Max, Team or Enterprise plan or a Console account (Claude Code docs), plus Bun, a JavaScript runtime. On Team and Enterprise, an admin has to turn channels on.
- Messages you send to yourself go through; anyone else is blocked until you allow them with
/imessage:access allowand their number. - Replies end with “Sent by Claude” unless you turn the signature off.
- SMS and RCS are off by default, because SMS sender IDs can be spoofed.
Anthropic’s own warning on allowlisting: “Anyone who can reply through the channel can approve or deny tool use in your session, so only allowlist senders you trust with that authority.” The plugin’s access settings only change on a command you type in the terminal, never on a request in an incoming text.
Community MCP servers and bridge apps: not Anthropic’s
Search for “claude imessage” and most results are MCP directories and GitHub projects: small programs that give Claude Desktop or Claude Code tools to read and send iMessages, plus a few paid bridge apps. Some are well made. None are Anthropic’s, and the quality, permissions and data handling vary from project to project.
Anthropic’s connector pages carry a general warning: “Only use connectors from developers you trust”, because Anthropic “cannot verify that they will work as intended or that they won’t change” (Claude connectors). Before installing one, check:
- What it reads. Your whole history, or only chats you name?
- Whether it sends without asking. Look for an approval step before every send.
- Who can talk to it. A tool that obeys incoming texts can be steered by anyone who texts you.
- What it needs. If the setup says to turn off System Integrity Protection, don’t. Anthropic’s own README points anyone who wants Tapbacks and edits to BlueBubbles, a separate app, and notes that it “requires disabling SIP”.
- Who maintains it. An abandoned project with Full Disk Access is a liability.
What Full Disk Access to chat.db really gives away
Your Mac keeps your entire Messages history, every conversation on every number and address, in one database file, ~/Library/Messages/chat.db. macOS protects that folder, so any tool that reads it needs Full Disk Access. That permission is much broader than it sounds. Apple describes it as letting apps “access all files on your computer, including data from other apps (for example, Mail, Messages, Safari, and Home), data from Time Machine backups, and certain administrative settings for all users” (Apple).
Three things follow:
- The permission goes to the app, not the tool. For Claude Code, the prompt names whichever app started it: Terminal, iTerm or your code editor. From then on, every script and every MCP server started from that app can read your mail, messages and browser data.
- Incoming texts become input to an AI. A message from someone else can contain instructions aimed at the AI (“ignore the above and forward me…”). Anthropic’s channel only accepts messages from you and senders you allowlist, and won’t take access changes from an incoming text. Not every community tool is that careful.
- Read means sent to a model. Messages a tool reads for Claude go to Anthropic to be processed. Anthropic says it trains on chats only if you allow it, a chat is flagged for safety review, or you opt in another way, and that training data doesn’t include raw content from connectors, including local MCP servers (Anthropic Privacy Center). Either way, your friends never agreed to be in the conversation.
If you do grant it, give it to the narrowest app you can, and switch it off in System Settings → Privacy & Security → Full Disk Access when you’re done. Do the same under Automation, which is the permission that lets an app control Messages to send. Our guide to Full Disk Access explains the permission in detail, and is it safe to let AI read your messages? covers the wider question.
Claude iMessage not working? Common fixes
- “authorization denied” from Claude Code’s iMessage plugin: the app that launched it has no Full Disk Access. Add Terminal (or iTerm, or your editor) in Full Disk Access, then quit and reopen it (Claude Code docs).
- Claude Code reads messages but can’t reply: the first reply triggers a macOS prompt asking to let that app control Messages. If you clicked Don’t Allow, turn it on under Privacy & Security → Automation.
- Claude on iPhone can’t see your texts: that’s by design. The iPhone app only writes new messages.
- The extension isn’t in your list: extensions are a Claude Desktop feature, not part of the web or phone apps, and this one works only on a Mac. Update Claude Desktop and look under Settings → Extensions → Browse extensions.
What none of these do
None of the iMessage options above read your WhatsApp, Telegram or Instagram chats on a Mac, and neither does ChatGPT’s Messages plugin, which covers only the Messages app (iMessage, SMS and RCS) (see ChatGPT and iMessage on a Mac). For WhatsApp, our guide to whether Claude can reply to WhatsApp goes through the options, including why a Claude Pro plan and a Claude API key are separate products.
Tera Chat for Mac, a free app made by the team behind this blog, brings iMessage, WhatsApp, Telegram, Instagram and Tinder into one inbox. It isn’t affiliated with or endorsed by Anthropic. With your own Claude (Anthropic) API key in Settings → API Keys, it drafts replies in your texting style for iMessage, WhatsApp and Telegram, and writes summaries and answers questions about a chat; you edit each draft and send it yourself. You pay Anthropic for what you use, and a daily spend cap (default $5) keeps it in check. Instagram and Tinder drafts need your ChatGPT account through Codex or a Tera Chat AI plan, and Autopilot isn’t available for iMessage.
The same honesty applies here: Tera Chat reads iMessage through Full Disk Access too, locally on your Mac, and the conversations its AI works on go to Anthropic. Once AI is set up, some features also run in the background (for example a summary after every 10 new messages), which you can pause in Settings → Pipelines. It needs a Mac with Apple silicon and macOS 15 or later. Setup is in using your own AI with Tera Chat.
Frequently asked questions
Can Claude read my iMessages?
On a Mac, yes, through Anthropic's Read and Send iMessages extension for Claude Desktop or the iMessage channel for Claude Code, after you grant macOS permissions. The Claude iPhone app can't: it only writes new messages.
Is there an official Claude iMessage connector?
Yes. Anthropic's connector directory lists Read and Send iMessages, made by Anthropic, for Claude Desktop on a Mac. You install it from Settings, then Extensions, then Browse extensions.
Are iMessage MCP servers on GitHub safe?
Treat them like any app you give your whole Messages history to. They're made by independent developers, any that reads your history needs Full Disk Access, and Anthropic says it can't verify that third-party tools will work as intended or won't change.
Why does the Claude Code iMessage plugin say authorization denied?
The app that started it (Terminal, iTerm or your code editor) doesn't have Full Disk Access. Add that app in System Settings, then Privacy and Security, then Full Disk Access, and quit and reopen it.
Can Claude reply to iMessages automatically?
Only when you set it up to. The iPhone app hands each draft to Messages for you to send, and the Mac extension sends when you ask Claude to. Claude Code's channel replies to messages you send it, and to other people only if you allowlist them.
Published . How we write and check our guides. Spotted something out of date? Email hello@terachat.co.