OpenAI integrates ChatGPT with Apple Messages on macOS

OpenAI has released an Apple Messages plugin for the ChatGPT desktop app on macOS, allowing the AI to interact directly with a user's private communications. The integration enables ChatGPT to read, search, draft, and send iMessages, SMS, and RCS messages from the Mac.

To utilize the feature, users must own a Mac equipped with Apple silicon (M-series chips) and have the Messages app configured on the device. The plugin is specifically integrated within the 'ChatGPT Work' and 'Codex' modes of the desktop application. While the AI can draft and send replies, OpenAI has implemented a safety layer requiring user approval for sending messages by default; the company explicitly advises users against granting persistent approval for these actions.

The shift toward AI agency

This update is part of a broader strategic push by OpenAI to move its desktop applications beyond simple chat interfaces. By deepening OS-level integrations, OpenAI is attempting to transform ChatGPT into an AI agent capable of interacting with local system tools and third-party applications. Rather than acting as a standalone destination, the AI is increasingly designed to operate as a layer over the user's existing digital workflow, automating tasks that previously required manual navigation between apps.

Privacy and security implications

This integration represents a significant milestone in AI agency, as it grants a third-party large language model access to one of Apple's most closed ecosystems. The ability for an AI to analyze personal communication patterns offers high utility by streamlining how users manage their correspondence, but it also introduces new security risks. To mitigate these concerns, OpenAI states that the integration runs locally on the Mac and does not create a permanent index of the user's messages, ensuring that the data remains on the device rather than being stored on external servers.

What to watch

As AI agents gain more control over personal data, the tension between utility and privacy will likely intensify. It remains to be seen how Apple will respond to a third-party application manipulating its proprietary messaging framework. Users should monitor whether this capability expands to other macOS apps or if Apple introduces restrictions to limit third-party AI access to the Messages database, which could potentially break the plugin's functionality in future OS updates.