Skip to content
NewsProduct launch

ChatGPT for Mac gains Apple Messages plugin to read, draft, and send texts on Apple Silicon

· by Pondero Newsdesk

The short version

OpenAI shipped an Apple Messages plugin for the ChatGPT desktop app on August 20, 2026, giving the chatbot read and send access to iMessages, SMS, and RCS on Apple Silicon Macs, with OpenAI warning users not to disable the default per-send confirmation step.

ChatGPT for Mac gains Apple Messages plugin to read, draft, and send texts on Apple Silicon

OpenAI shipped an Apple Messages plugin for the ChatGPT desktop app on August 20, 2026, letting the chatbot read a user's full iMessage, SMS, and RCS history, compose replies, and send texts on their behalf. The company immediately warned users against one configuration option: turning off the default per-send confirmation, which OpenAI says "removes your final chance to review a message before ChatGPT sends it as you."

What the plugin does

The Apple Messages plugin is available to all ChatGPT plan tiers in the Mac desktop app, per OpenAI's plugin documentation. It works inside ChatGPT Work and Codex sessions but not in standard ChatGPT chats. Apple Silicon is the only supported hardware; Intel Macs are excluded from the initial rollout.

Once installed, the plugin can read and search a user's full iMessage, SMS, and RCS message history stored on the Mac. From there, it can draft replies, analyze conversations for patterns or context, suggest follow-up messages based on recent exchanges, and send texts through the macOS Messages app. OpenAI also lists spam-finding as a supported task.

OpenAI published a set of suggested prompts in its plugin guide, including:

  • "Check my calendar and reply to [name] with a few times I'm free for dinner next week"
  • "Suggest follow ups from yesterday in messages"
  • "Find birthdays in @messages and add them to my calendar"
  • "Find potential spam messages I can delete"

The plugin requires Full Disk Access in macOS System Settings, access to contact names, and automation permissions. Per MacRumors, it relies on AppleScript and the macOS Accessibility APIs to function, meaning it interacts with the Messages app at the operating system level rather than through a direct API from Apple.

By default, every outbound text requires explicit user confirmation before it goes out. OpenAI also offers a persistent-approval mode, which sends messages without individual sign-off. The company discourages that mode, writing in its documentation that enabling it "removes your final chance to review a message before ChatGPT sends it as you."

The privacy question the announcement left open

OpenAI told Bloomberg on August 20 that the plugin runs locally on the user's device and "doesn't create an index of all someone's messages," per TechCrunch's coverage. What that statement covers exactly is not specified in the plugin documentation. TechCrunch reported it had reached out to OpenAI for more detail on data handling and had not received a response as of publication.

The practical concern is that the plugin has read access to a user's full message history across all three messaging types. Even if the plugin does not transmit that history directly to OpenAI's servers, any query a user sends to ChatGPT about their messages passes through OpenAI's inference infrastructure. The plugin documentation does not specify what message content is included with each query, how long context is retained, or how it is treated under OpenAI's standard data policies.

The risk profile differs across user tiers. ChatGPT Work sessions operate under enterprise data handling agreements. Users on individual plans rely on the same privacy terms that govern their existing ChatGPT subscription. OpenAI has not published a separate data handling statement specific to the Messages plugin as of August 21, 2026.

The permission requirements amplify the scope. Full Disk Access is one of the broadest grants available in macOS, giving the plugin read access well beyond Messages. The automation permissions let it interact programmatically with other macOS applications, not just Messages.

Built without apparent coordination from Apple

MacRumors reported on August 20 that Apple's involvement in the plugin's development is unknown. The AppleScript and Accessibility API approach it relies on are general-purpose macOS automation interfaces available to any developer without Apple's participation or approval.

That matters because the two companies are actively in litigation. Apple sued OpenAI in July 2026 for alleged theft of trade secrets, per MacRumors. Nothing in OpenAI's release materials for the Messages plugin indicates Apple had advance knowledge of the feature. The plugin went live through OpenAI's standard ChatGPT desktop update channel.

The contrast with ChatGPT's Apple Health integration is notable. That feature, which began rolling out to US users in July 2026, was described publicly in terms that suggested Apple's involvement in scoping what data the integration could access. The Messages plugin has no equivalent disclosure. It functions by reading system-level message data rather than through a structured partnership API.

Apple has not commented publicly on the Messages plugin as of August 21.

Other additions in the same update

The August 20 release also shipped two other features. Pinned chats now synchronize between the ChatGPT Mac desktop app and iOS, so a conversation pinned on a Mac stays accessible on iPhone without a manual step.

The update also added read-only snapshot sharing for Codex threads. A user can generate a shareable link to a local Codex conversation; the snapshot reflects the conversation at the moment of sharing and does not update as the original thread continues. Links from personal accounts are accessible to anyone with the URL. Links from workspace accounts are restricted to members of that workspace. OpenAI notes that Codex redacts known secret patterns (such as API keys and credential strings) before generating a snapshot, but recommends users review the output before sharing.

What to watch next

OpenAI has not confirmed whether the Apple Messages plugin will come to Intel Macs. Intel hardware remains in active use across enterprise environments, and the exclusion limits rollout to users who have upgraded to Apple Silicon.

An iOS version would represent a more significant expansion, since iMessage volume on iPhone dwarfs desktop usage. A mobile equivalent would require a different integration path; iOS does not expose the same AppleScript and Accessibility interfaces as macOS.

EU data-protection authorities have not commented on the plugin. Any European rollout would need to address GDPR requirements around third-party access to private message content, particularly the question of whether user message data leaves the device during inference queries.

OpenAI's response to TechCrunch's data-handling questions will set the factual baseline for what the plugin transmits and how content is handled. That clarification, when it arrives, is the most consequential near-term disclosure for users deciding whether to install the plugin.

Sources