AI Access Auditor
Shows and revokes everything AI coding agents can access on your Mac
AI Access Auditor is a macOS app that lists every grant an AI coding agent has collected — tool permissions, trusted folders, MCP servers, saved logins (sudo, SSH, GitHub, AWS, gcloud, Kubernetes), extensions, and background jobs — and lets you revoke each one with a backed-up, undoable click. It pops up an Allow/Deny prompt before Claude Code, Codex CLI, or Gemini CLI act, even if they're running with --yolo or as root, and can grant access on a timer — an hour, a day, a week — that expires automatically. It also watches for data leaving your Mac and flags new AI tools or MCP servers as they install.
What holds up
- +Intercepts commands before Claude Code, Codex CLI or Gemini CLI act, even in YOLO mode
- +Grants can expire automatically after an hour, a day, or a week instead of staying open forever
- +Every revoke is backed up first, so you can undo it from History if something breaks
- +Checks beyond MCP: macOS privacy permissions, saved SSH/GitHub/AWS credentials, browser extensions
Mind the limits
- −Mac only — Windows and Linux agent setups aren't covered
- −If the app isn't running, agents fall back to asking you the usual way — no protection while it's closed
Picked here? Add the badge
Put it on your site. It links back to this page. Free for every listed product.
<a href="https://stillworks.dev/products/p/ai-access-auditor/"><img src="https://stillworks.dev/badge/ai-access-auditor.svg" alt="Picked by StillWorks" width="230" height="54"></a>