OpenAI Launches Apple Messages Plugin for ChatGPT on macOS, Enabling AI to Read and Send Texts
Summary
- • OpenAI releases Apple Messages plugin for ChatGPT macOS to read, search, draft, and send iMessage, SMS, and RCS texts
- • Plugin available on all plans on Apple silicon Macs; works in ChatGPT Work and Codex for professional use
- • Runs locally with no full message index created; user approval required by default before any message is sent
- • OpenAI warns disabling persistent approval removes 'final chance to review a message before ChatGPT sends it as you'
Updates
Plugin runs via AppleScript and Accessibility; needs Full Disk Access permission
The Apple Messages plugin interacts with the Messages app using macOS-native AppleScript and Accessibility tools. Users must grant Full Disk Access in System Settings, as well as permissions for contacts and automation, during setup.
Standing send permission creates prompt-injection risk via untrusted message content
With persistent send approval enabled, any message thread becomes untrusted input that could trigger unintended sends — a prompt-injection attack surface. OpenAI's own documentation flags the thread as 'untrusted input,' reinforcing its warning against enabling standing approval.
Apple vs. OpenAI trade-secret lawsuit adds legal friction to the integration
The integration lands alongside Apple's lawsuit against OpenAI filed the prior month, alleging trade-secret theft. The lawsuit adds a notable legal undercurrent to the expanding Apple-OpenAI software partnership.
Details
Apple Messages plugin: read, search, draft, and send messages via ChatGPT on macOS
OpenAI's latest ChatGPT macOS update adds an Apple Messages plugin that lets the AI read and search a user's Messages chats, prepare replies, and send messages on the user's behalf — a first for a desktop AI integration with a personal messaging inbox.
Supports iMessage, SMS, and RCS; Apple silicon Macs only
The plugin works with iMessage, SMS, and RCS message types. It is currently limited to Macs running Apple silicon (M-series chips) and does not support Intel Macs. It does not allow interacting with ChatGPT remotely through Messages.
Available on all ChatGPT plans; works in ChatGPT Work and Codex
The Apple Messages plugin is available across all ChatGPT plans in the macOS desktop app, and is supported within ChatGPT Work and Codex, enabling professional and developer use cases beyond personal messaging.
Runs locally; no full message index; default approval gate before sends
OpenAI told Bloomberg the plugin runs locally on the user's machine and 'doesn't create an index of all someone's messages.' By default, ChatGPT requires explicit user confirmation — including recipients and content — before sending any message.
OpenAI explicitly warns: persistent approval 'removes your final chance to review'
OpenAI's plugin guide warns users against enabling persistent approval, stating it 'removes your final chance to review a message before ChatGPT sends it as you.' This is an unusually direct risk disclosure, acknowledging the potential for unintended message sends.
Pinned chats now sync across ChatGPT desktop app and iOS
The same update enables pinned conversations to stay synchronized between the ChatGPT macOS desktop app and the iOS app, keeping important chats accessible across devices.
Shareable read-only Codex thread snapshots
Users can now share read-only snapshots of local Codex threads. Snapshots don't update as the original thread evolves. OpenAI warns users to review snapshots for sensitive information before sharing, as Codex only redacts known secret patterns.
Workspace Site co-editing and URL changes without redeployment
Site owners can now invite active workspace members to co-edit Sites, and can change a ChatGPT-hosted URL without redeploying, with the old address redirecting to the new one.
Sources: TechCrunch (August 20, 2026); 9to5Mac/TechMeme; OpenAI release notes and plugin guide.
What This Means
ChatGPT gaining the ability to read, analyze, and send messages on behalf of users represents a qualitative leap from AI as a query tool to AI as a personal communication agent. The integration carries meaningful privacy implications — an AI with full message-inbox access can read sensitive conversations, and users who disable the default approval gate lose their last line of review before the AI sends messages in their name. OpenAI's unusually explicit safety warnings are telling: the company knows the risk is real and is trying to front-run backlash. As AI agents expand into personal communication at scale, users, employers, and regulators will increasingly need to grapple with who is accountable when an AI sends an unintended message as you.
Sources
- ChatGPT can now send texts for you with new Apple Messages plug-inTechCrunch
- OpenAI rolls out an Apple Messages plugin for ChatGPT on macOS, letting ChatGPT read, search, and analyze chats, prepare and send messages, and more9to5mac
- ChatGPT wants Full Disk Access to your Mac and MessagesComputerworld
- ChatGPT Can Now Read and Send Apple Messages on MacTimesofai