ChatGPT can now operate Apple Messages on a Mac. OpenAI launched the plugin on August 20, 2026, giving ChatGPT Work and Codex users the ability to search conversations, draft replies, send messages, and request summaries through Apple’s iMessage service.
The feature turns ChatGPT from a chatbot into an operator for the Messages app. Users can ask it to find specific messages, write responses, read conversations, and send text messages, although those actions require access that reaches well beyond an ordinary chat window.
To activate the plugin, users must allow ChatGPT to access their Mac’s Messages history, contacts, and automation tools. They must also enable Full Disk Access, a permission that allows ChatGPT to read and write files on the device — a large key for a relatively small door.
Local Processing Does Not Remove The Privacy Question
OpenAI says the Messages plugin runs locally on the user’s device and does not create a full index of the user’s messages. ChatGPT must receive a specific request before it reads messages, which gives users a clear trigger for message access rather than granting the system an open-ended view.
That protection matters, but it does not settle the larger issue. The plugin can upload Apple customer data to OpenAI’s network, and it can take actions that affect other people, including writing and sending messages. A system that can read a conversation is one thing; a system that can answer it is another.
OpenAI discourages users from enabling persistent approval for message sending. The company warns that persistent approval “removes your final chance to review a message before ChatGPT sends it as you,” which is a polite way to say that automation can erase the moment when a bad idea remains reversible.
The permission model also puts Apple’s platform rules under pressure. Apple has a history of disabling third-party access to iMessage when the required permissions are not granted, and Apple previously disabled Beeper Mini in 2024.
Apple And OpenAI Have More Than Permissions To Discuss
OpenAI has not specified whether Apple worked with it to develop the plugin. That unanswered question sits beside a legal dispute: Apple sued OpenAI in July, accusing the company of trade secret theft and hiring employees to obtain confidential information.
The plugin does not prove that Apple approved the integration, and the available facts do not establish a partnership. It does show that OpenAI now has a tool that can interact with a service Apple controls, using access granted by the Mac user.
That distinction will matter to anyone weighing convenience against control. Users receive message search, drafting, summaries, and sending from one ChatGPT interface, but they must hand over permissions for Messages, contacts, automation tools, and files before the feature can do its work.
OpenAI describes the system as local and request-driven, while the plugin’s ability to upload Apple customer data to OpenAI’s network keeps the privacy debate alive. The company has specified permission protections, but the overall privacy framework remains unclear.
The timing adds another layer to the story. Apple sued OpenAI in July, and OpenAI launched the Messages plugin on August 20, 2026; the two companies therefore meet here as platform owner and software developer, with a legal dispute already in the background.
For now, the feature is limited to ChatGPT Work and Codex users on Mac. That restriction narrows the audience, but it does not narrow the question: when an assistant can send a message in your name, who is really holding the keyboard?
One unrelated calendar detail also appears alongside the announcement: Disrupt 2026 tickets have a sale running from October 13 through October 15, 2026. Even technology news occasionally arrives with a checkout reminder attached.
Based on
