Model Context Protocol moderate risk

Simctl

A Model Context Protocol server for controlling iOS Simulators, enabling device and app management, permission control, and system feature manipulation.

Connections & Capabilities

Connects To

GitHubTwitter

Capabilities

readwriteexecadmin

Quickstart

Install

npx simctl-mcp

Config

{
  "mcpServers": {
    "simctl-mcp": {
      "command": "npx",
      "args": ["-y", "simctl-mcp"]
    }
  }
}

Exposed MCP Tools (27)

moderate

Create new simulator devices

Creates a new iOS Simulator device with specified parameters.

Can consume resources and potentially lead to device proliferation.

high

Delete existing devices

Deletes an existing iOS Simulator device.

Destructive operation that permanently removes the device and its data.

high

Install apps

Installs an application on the simulator.

Installing untrusted apps can introduce malware or vulnerabilities.

moderate

Uninstall apps

Uninstalls an application from the simulator.

Removes the app and its associated data.

safe

Open URLs in simulator

Opens a specified URL in the simulator's default browser.

Opening malicious URLs could potentially lead to phishing or other attacks, but is sandboxed.

high

Get/Set pasteboard content (clipboard)

Retrieves or sets the content of the simulator's clipboard.

Sensitive data on the clipboard could be exposed.

critical

Add root certificates

Adds a root certificate to the simulator's trusted store.

Adding untrusted root certificates can compromise the security of the simulator.

high

Reset keychain

Resets the simulator's keychain, deleting all stored certificates and keys.

Destructive operation that removes all stored credentials.

moderate

Launch apps

Launches a specified application in the simulator.

Launching an app could trigger unintended actions or expose vulnerabilities.

moderate

Terminate running apps

Terminates a running application in the simulator.

Forcefully quitting an app can lead to data loss or corruption.

safe

Get app container path

Retrieves the path to the application's container directory.

Read-only access to the app's container path.

safe

Get app information

Retrieves information about a specified application.

Read-only access to app information.

safe

List installed apps

Lists all applications installed on the simulator.

Read-only operation that lists installed apps.

high

Grant permissions to apps

Grants specified permissions to an application.

Granting excessive permissions can compromise security.

high

Revoke app permissions

Revokes specified permissions from an application.

Revoking necessary permissions can cause the app to malfunction.

high

Reset all app permissions

Resets all permissions for an application to their default state.

Resets all permissions, potentially disrupting app functionality.

moderate

Get/Set environment variables

Retrieves or sets environment variables within the simulator.

Modifying environment variables can affect app behavior.

safe

Get/Set appearance (light/dark mode)

Sets the appearance of the simulator to light or dark mode.

Cosmetic change with no security implications.

moderate

Send simulated push notifications

Sends a simulated push notification to the simulator.

Sending push notifications can trigger app behavior.

moderate

Add regular certificates

Adds a regular certificate to the simulator's keychain.

Adding untrusted certificates can weaken security.

safe

Take screenshots

Takes a screenshot of the simulator's display.

Captures the screen content, potentially revealing sensitive information if displayed.

safe

List available devices

Lists all available simulator devices.

Read-only operation that lists available devices.

safe

List available device types

Lists all available simulator device types.

Read-only operation that lists available device types.

safe

List available runtimes

Lists all available simulator runtimes.

Read-only operation that lists available runtimes.

moderate

Boot devices

Boots a specified simulator device.

Boots a device, consuming resources.

moderate

Shutdown devices

Shuts down a specified simulator device.

Shuts down a device.

moderate

Add media files

Adds media files to the simulator.

Adding malicious media files could potentially exploit vulnerabilities.

Safety Assessment

This server provides powerful control over iOS Simulators, which can be useful for testing and development. However, the ability to install apps, modify settings, and access the clipboard introduces risks. Use with caution, especially when handling sensitive data or untrusted apps.

Simulator environment provides some isolation from the host system.
App permissions can be managed, limiting potential damage from malicious apps.
Read-only operations are available for inspecting simulator state.
HTTP server mode allows controlled network access.

Can install and uninstall apps, potentially introducing or removing malicious software.
Allows modification of system settings and features within the simulator.
Can add certificates, potentially weakening security if misused.
Clipboard access can expose sensitive data.
No built-in authentication or authorization mechanisms.