alexanderradahl/mac-developer-bridge

View on GitHub ↗

Give ChatGPT a real terminal on your Mac. Open-source MCP bridge for shell, files, PTY sessions, jobs, and Codex history.

19 ★5 forksJavaScriptUpdated 18d ago

What you need to know

Open-source macOS bridge (menu-bar app + Node.js MCP-style server) that lets ChatGPT act as the reasoning brain while the bridge exposes real Mac capabilities — arbitrary shells, filesystem access, background Chrome tabs, stored Codex thread reads, and detached jobs — over a Cloudflare or OpenAI Secure MCP Tunnel.

Install

git clone https://github.com/alexanderradahl/mac-developer-bridge.git
cd mac-developer-bridge && ./menubar/build.sh && open /Applications/MacDevBridge.app
Workspace users with OpenAI Secure MCP Tunnel access can use install.sh instead.
Requirements: macOS, Node.js 18+, cloudflared, a hostname/tunnel, and ChatGPT Developer mode.

Usage

  • Use Start then Copy ChatGPT Setup from the menu-bar app; detailed OAuth and Cloudflare setup in Connecting to ChatGPT / DEPLOY.md.
  • Ask ChatGPT to recover a stored Codex thread, inspect the repo it refers to, and continue working from ChatGPT.
  • Run tests, builds, git, package managers, DB CLIs, AppleScript via shell_exec; keep long-running processes alive with shell_start/shell_job_*.
  • Optionally operate approved pages in the real logged-in Chrome profile through the chrome_* tools without bringing Chrome to the foreground.

Key features

  • 24 tools: bridge_status, shell_exec, shell_start/shell_job_*/shell_job_kill, fs_read/fs_write/fs_list/fs_stat/fs_manage, apply_patch (git-apply), codex_thread_read/list/turns_list, audit_tail, and chrome_workspace_*/chrome_tabs/open/navigate/snapshot/click/fill/close.
  • The bridge itself makes no OpenAI model call — deterministic local tools, ChatGPT supplies all reasoning.
  • Codex-history tools use read-only codex app-server methods and never call turn/start.
  • Detached background jobs with persistent logs, per-user macOS LaunchAgent persistence, and a fail-closed unlock latch re-read before every tool call.
  • Local kill switch (scripts/disable.sh) stops bridge, front end, Chrome native host, detached jobs, pty sessions, and child MCP servers; MIT licensed, independent of OpenAI/Cloudflare.

Best for

ChatGPT users (Developer mode) who want their AI to drive a real Mac terminal, filesystem, and browser while staying in control via audit logs and a kill switch.

Caveats

  • NOT sandboxed and maintains NO command/path allowlist — the client effectively has your macOS user's full permissions; heavy security warning in SECURITY.md.
  • Requires ChatGPT Developer mode plus a tunnel (Cloudflare/OpenAI Secure MCP Tunnel); independent project, not an official OpenAI or Cloudflare product.
  • Background Chrome is opt-in, monoprofile (binds to the selected Chrome profile and refuses signed-out/mismatched profiles).
Platforms: macOSClients: ChatGPT

Reviewed 2026-08-18

Topics

ai-agentschatgptchatgpt-mcpcodexcodex-mcpdeveloper-productivitydeveloper-toolslocal-firstmacosmacos-automationmcpmcp-servermodel-context-protocolopen-sourceterminalterminal-mcp
Stars
19★
Forks
5
Language
JavaScript
License
MIT
Created
2026-08-15
Last push
2026-08-17