Apple will limit Mac disk access as AI agents ‘substantially’ increase risk

# Apple will limit Mac disk access as AI agents ‘substantially’ increase risk Source: [https://www.theverge.com/tech/1004295/apple-limit-mac-disk-access-ai-agents](https://www.theverge.com/tech/1004295/apple-limit-mac-disk-access-ai-agents) [Skip to main content](https://www.theverge.com/tech/1004295/apple-limit-mac-disk-access-ai-agents#content) Mac apps will soon need ‘very explicit user action’ to gain full disk access, according to Apple\. Mac apps will soon need ‘very explicit user action’ to gain full disk access, according to Apple\. by Oct 2, 2026, 8:08 PM UTC   Photo: Amelia Holowaty Krales / The Verge [](https://www.theverge.com/authors/emma-roth) Emma Roth is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more\. Previously, she was a writer and editor at MUO\. Apple will add new limits for “full disk access” on Mac in response to risks posed by AI agents,[as reported earlier by*TechCrunch*](https://techcrunch.com/2026/10/02/apple-says-its-tightening-macos-full-disk-access-controls-due-to-new-risks-from-ai-agents/)\. In[an update on Friday](https://developer.apple.com/news/?id=p6zjojqw), Apple says it’s rolling out new controls to “ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action\.” The change comes just weeks after*Inc*’s Jason Aten found that Meta’s Muse AI somehow[knew the contents of his messages](https://www.theverge.com/ai-artificial-intelligence/997833/meta-muse-creepy), despite not giving the chatbot explicit permission to access them on his iPhone or Mac\. Meta spokesperson Andy Stone[pushed back on this report](https://x.com/andymstone/status/2105107596734849423?s=20), saying access to Messages is “entirely opt\-in\.” Stone added that you have to “enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content\.” Now Apple is addressing how developers use that sweeping access, saying: > Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding… As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially\. Full disk access[is a permission](https://www.huntress.com/blog/ask-the-mac-guy-whats-the-deal-with-full-disk-access)on macOS that gives an app access to a user’s entire system\. Apple says the feature “largely sidesteps” privacy controls offered to users “to allow backup apps to function properly on Mac\.” The company doesn’t say when it plans to roll out its update for full disk access\. Apple didn’t immediately respond to*The Verge*’s request for comment\. **Follow topics and authors**from this story to see more like this in your personalized homepage feed and to receive email updates\. - Emma Roth ## The Verge Daily A free daily digest of the news that matters most\.