Why does Wairy need Full Disk Access?

macOS stores its permission database (TCC.db) in a protected location that only apps with Full Disk Access can read. That's the single reason Wairy asks for it, and everything it reads stays on your machine.

Is Wairy on the App Store?

No. Reading the permission database requires Full Disk Access and touches a private Apple database, which App Store rules don't allow. Wairy is distributed as a notarized download.

Frequently asked questions

Q: Does Wairy send my data anywhere?

No. Wairy has no account and no cloud. Everything is read and shown on-device. The only network calls it makes are checking for updates and verifying a Pro license.

Everything you'd want to know before granting access.

What does Wairy actually do?

It reads macOS's permission database and shows every access grant on your Mac (camera, microphone, screen recording, Full Disk Access, accessibility, and dozens more), grouped by app and scored by risk. It pays special attention to AI tools: which apps have MCP servers, what those agents can reach, and what's running right now.

Why does it need Full Disk Access?

macOS keeps its permission database (called TCC.db) in a protected folder that only an app with Full Disk Access can read. That grant is the one and only door in. It's literally why an auditor like this can't be casual about it. Wairy walks you through granting it on first launch, and it's the single privileged thing the app ever asks for.

Is it read-only? Can it change my permissions?

Reading is strictly read-only. Wairy never writes to the permission database itself. When you choose to clean up a grant, it goes through Apple's own supported tool (tccutil) or sends you to the right System Settings pane, and only ever when you click it. Nothing changes on its own.

Does Wairy send my data anywhere?

No. There's no account, no cloud, and no telemetry. Everything is read and displayed on your machine. The only network requests Wairy makes are checking for a new version and verifying a Pro license key, neither includes anything about your permissions.

Why isn't it on the Mac App Store?

It can't be. Reading the permission database requires Full Disk Access and touches a private Apple database, both of which App Store review rejects. So Wairy is distributed the way tools like Little Snitch are, a notarized, directly-downloaded app.

What's the difference between Free and Pro?

Free gives you a full scan, risk detail on your highest-risk apps, an overview of your AI footprint, and cleanup actions. Pro unlocks risk scores for every app, per-server MCP detail, background monitoring with alerts, the full change-history timeline, and exports. The free tier is permanent, not a trial.

What are MCP servers, and why does Wairy care?

MCP (Model Context Protocol) servers give an AI tool extra abilities (file access, web, databases, and more). They run as helpers of apps like Claude Desktop or Cursor and act through those apps' permissions. Wairy shows which ones are registered, which are running, and what they can reach, because that's exactly the access most people can't see.

Which macOS versions are supported?

macOS 14 (Sonoma) and later, on both Apple Silicon and Intel.

How do I get a refund?

Reach out through the support page and we'll sort it out. Pro is a one-time purchase through Gumroad.