OpenAI ships Apple messages plugin allowing ChatGPT desktop to draft and send texts

OpenAI has released a native Apple Messages plugin for its ChatGPT desktop application on macOS, allowing the AI assistant to read, search, and send iMessage, SMS, and RCS texts directly from a user's Mac. The integration, available across all ChatGPT subscription tiers for Apple silicon Macs, operates within the platform's ChatGPT Work and Codex workspace environments.

The release enables the AI assistant to synthesize message histories, draft context-aware responses, check calendar availability against incoming requests, and dispatch outgoing messages on a user's behalf.

Operational Requirements and macOS Safety Guardrails

To run the integration, users must manually install the Apple Messages plugin from the ChatGPT Plugins directory and grant macOS System Settings permissions, including Full Disk Access, Contacts, and Accessibility/Automation rights.

OpenAI emphasized that the plugin operates with strict default consent rules to prevent unauthorized automated text dispatches:

• Per-Send Approval: By default, ChatGPT presents an explicit prompt displaying the drafted text and target recipient, requiring human approval before dispatching the message.

• Local Mac Automation: The plugin relies on local AppleScript and accessibility hooks to interact with the native Messages client rather than a direct cloud-to-cloud server connection.

• Scope Isolation: The plugin is restricted to the desktop app's Work and Codex interfaces and does not run inside standard consumer ChatGPT web or mobile chats.

Privacy Reactions and Enterprise Controls

The launch triggered immediate debate across cybersecurity circles regarding broad data access. Because Apple Messages stores local message history in a centralized database on the Mac, granting Full Disk Access allows the plugin to index full text logs to fulfill search and summarization tasks.

OpenAI clarified that the plugin does not allow third parties to text a user's ChatGPT account remotely, nor does it run background message processing when the desktop app is closed. For enterprise deployment, IT administrators managing enterprise ChatGPT workspaces can disable the Apple Messages plugin centrally using existing Computer Use governance policies.

The release marks a significant step toward desktop agent automation, turning LLM assistants from passive text generators into active dispatch engines across native operating system communication apps.