ChatGPT Can Now Read and Send Your iMessages on a Mac

OpenAI has pushed ChatGPT a step deeper into the Mac. On August 20 it released a plugin that lets the assistant read, search, summarize and send your Apple Messages, covering iMessage, SMS and RCS conversations, as MacRumors first detailed. You can ask ChatGPT to find the address a friend texted you last week, catch up on a group thread you have been ignoring, or draft a reply without opening the Messages app at all.

It works inside the ChatGPT desktop app on Apple silicon Macs, in both the Work and Codex modes, and it is available to every tier including free users. Intel Macs are not supported. On paper it is the kind of small, practical feature that makes an assistant feel less like a novelty and more like something you leave running.

What it asks for in return

The access it needs is the part worth slowing down for. To function, the plugin requires Full Disk Access, along with permission to read your contact names and to control the Messages app through automation. Full Disk Access is one of the broadest permissions macOS hands out. It is the key that lets an app reach into folders the system normally keeps walled off, and Apple's own iMessage database sits behind it.

OpenAI has put sensible guardrails on the outbound side. By default, every message the assistant tries to send needs your approval first, so it cannot fire off a text on your behalf without a tap. You can also grant a specific chat standing permission if you trust it, which trades a little safety for a lot of convenience. Reading, though, is the quieter risk. Once an app can see your entire message history, summarizing it and sending that summary somewhere are only a few steps apart, and the value of the feature depends entirely on how carefully that data is handled.

Useful, with your eyes open

I keep landing on the same two-sided feeling about this one. Being able to say "what did the plumber quote me" and get an answer pulled straight from a months-old thread is a real convenience, the sort that saves a genuine minute of scrolling several times a day. And handing any assistant standing access to every private conversation you have had on your phone is not a small thing, however well the permissions are designed.

The reasonable middle is to treat it like any powerful tool. Grant the access if the payoff is worth it to you, keep the default that every send needs approval, and remember that a summary of your messages is still your messages. This is part of a broader move to put assistants everywhere you already work rather than in a separate window you have to visit. That is convenient by design, and convenience is exactly what makes it easy to stop noticing how much these tools can see.