OpenAI has released a major desktop update: an official Apple Messages plugin for the ChatGPT Mac app. This feature allows the chatbot to read, search, draft, and send iMessage, SMS, and RCS texts directly from your Mac.
Whether you want to automate follow-up messages or summarize long family group chats, here is everything you need to know about how the feature works, setup requirements, and potential privacy risks.
KEY TAKEAWAY
What Changed: ChatGPT can now read, search, draft, and send iMessage, SMS, and RCS texts directly through macOS.
The Catch: It requires an Apple Silicon Mac (M1–M4), runs exclusively in Codex or ChatGPT Work modes, and asks for manual approval before sending any text by default.
What Does the ChatGPT Apple Messages Plugin Do?
The plugin turns ChatGPT into an active agent on your Mac, building upon recent hidden ChatGPT features most users don’t know. Rather than simply outputting text for you to copy and paste, it directly triggers actions inside macOS’s native Messages app using built-in AppleScript and Accessibility tools.
- Draft & Send Texts: Ask ChatGPT to draft a reply or send new messages to contacts saved in your address book.
- Search & Summarize History: Prompt the AI to find specific information from past threads (e.g., “What time did Sarah say dinner was?”) or generate summaries of lengthy conversations.
- Cross-App Workflows: Combine text data with calendar events or notes (e.g., “Find my mom’s birthday in @messages and create a calendar invite”).
The integration natively supports all message protocols handled by your Mac, bringing automated tools straight into your mobile app ecosystem.
Hardware & Workspace Requirements
Before setting up the plugin, ensure your environment meets the strict technical constraints:
| Requirement | Supported | Not Supported |
|---|---|---|
| Hardware | Apple Silicon Macs (M1, M2, M3, M4 chips) | Intel-based Macs |
| App Surface | ChatGPT Desktop App (Codex & ChatGPT Work modes) | Standard ChatGPT Web interface, iOS, or Android |
| Messaging Protocols | iMessage, SMS, and RCS (synced to your Mac) | WhatsApp, Signal, or third-party web apps |
PRO-TIP: Check Your Mode First
If you don’t see the Apple Messages plugin option, make sure you aren’t in a standard conversation. The integration only functions when starting a workspace in Codex or ChatGPT Work. Explore other productivity upgrades in our guide to the best AI tools for productivity.
How to Set Up and Enable the Messages Plugin
Setting up the integration requires configuring both the ChatGPT app and macOS System Settings.
Step 1: Install the Plugin in ChatGPT
- Open the ChatGPT app on your Mac.
- Navigate to the Plugins tab/directory.
- Search for Apple Messages under the Public Plugins section and click Install.
- Start a new ChatGPT Work or Codex session.
Step 2: Grant System Permissions in macOS
To allow ChatGPT to read and send messages, you must configure your local system permissions:
- Open System Settings on your Mac.
- Go to Privacy & Security.
- Turn on Full Disk Access for the ChatGPT desktop app.
- Under Automation and Contacts, check the box allowing ChatGPT to control Apple Messages and access contact details.
CRITICAL SECURITY NOTE
Never enable the “Always Allow” send permission for untrusted or group chats. Incoming text messages can contain hidden prompt injection attacks designed to force the AI into sending unauthorized messages from your account. Always stick to “Allow Once” per-send approvals.
Is It Safe? Key Privacy and Security Guardrails
Connecting an AI model to your personal message history raises valid security questions. OpenAI built several safety guardrails directly into the workflow:
- Per-Send Approval (Default): Before any text goes out, ChatGPT generates a draft preview. You must manually click Allow Once to send the message.
- Prompt Injection Protection: OpenAI explicitly advises against using the “Always Allow” setting. Keeping manual approval active prevents attackers from exploiting text threads—a principle similar to broader safety frameworks seen in global AI governance treaties.
- Local Processing: The Messages integration uses local macOS automation features rather than uploading your entire message database to external cloud storage.
Frequently Asked Questions (FAQ)
No. By default, the Apple Messages plugin operates with per-send approval. Whenever ChatGPT drafts a text, it displays a preview detailing the recipient and message body. The text will not send until you manually click Allow Once. While an “Always Allow” setting exists, security experts and OpenAI strongly advise keeping manual approvals enabled to protect against prompt injection risks.
No. The Apple Messages plugin is currently exclusive to the ChatGPT desktop app for macOS running on Apple Silicon (M1, M2, M3, M4 chips). It is not supported on Intel-based Macs, Windows PCs, web browsers, or mobile apps (iOS/Android). If you are troubleshooting iOS network or connection issues, check our troubleshooting guide on how to fix the No SIM Card Installed error on iPhone.
No. The integration works strictly one way: the ChatGPT desktop app accesses your local Mac Messages application to read, organize, draft, or send texts. You cannot text ChatGPT’s phone number or use iMessage as a remote interface to control the AI from your phone.