OpenAI shipped an Apple Messages plugin for ChatGPT on Mac in August 2026. It reads your iMessage, SMS, and RCS threads, drafts replies, and sends them for you – with your sign-off first. Here’s what it actually does, how to turn it on, and whether it’s worth the permissions it asks for.
What is ChatGPT’s Apple Messages integration?
It’s a plugin for the ChatGPT desktop app on Mac that connects to the native Messages app. You can ask ChatGPT to find a specific conversation, summarize a thread you fell behind on, or write a reply – and it’ll send that reply through Messages once you approve it. It covers iMessage, SMS, and RCS, since those all run through the same Messages app on macOS.
It’s not a new Siri feature and it’s not built into regular ChatGPT chats. It only works inside ChatGPT Work and Codex sessions on the desktop app.
How it actually works under the hood
This is the part most coverage glosses over, and it matters for the privacy question later. ChatGPT doesn’t have some special Apple-approved pipe into Messages. It uses AppleScript and macOS Accessibility permissions – the same automation tools a lot of Mac utilities have used for years – to read and control the Messages app locally on your machine.
OpenAI’s Ari Weinstein called it a “native integration” in the announcement post. Native here means it runs locally through standard Mac automation, not that Apple built an official API for it. That distinction is doing a lot of work, because it’s also why Apple can effectively shut this down the way it did with Beeper Mini in 2024, if it wants to.
What you can actually do with it
- Search and catch up: Ask it to find a conversation from last week, or summarize a group chat you’ve been ignoring.
- Draft replies. Give it context – “reply to Sarah with a few times I’m free Thursday” – and it writes a message in your voice, pulling from the thread history.
- Send messages: After you approve the draft and the recipient list, it sends through Messages directly. Nothing goes out without that approval step by default.
- Pull details from old threads: Instead of scrolling for twenty minutes to find an address someone sent you in March, you ask.
What it won’t do: text you back through iMessage. You can’t message ChatGPT from your phone and get a reply. The whole thing is one-directional – Mac app to Messages, not the other way around.
How to set it up
- Update ChatGPT for Mac and confirm you’re on an Apple Silicon machine – Intel Macs are locked out entirely.
- Install the Apple Messages plugin from the Plugins directory inside the ChatGPT desktop app.
- Start a Codex or Work session. A regular ChatGPT chat won’t show the plugin at all.
- Grant permissions when prompted – this means turning on Full Disk Access in System Settings and letting ChatGPT read your contact names and use Accessibility/automation.
- Test it with something low-stakes first. Ask it to summarize a recent thread before you let it draft anything you’re sending to another person.
You’ll hit an approval screen before any message actually goes out. There’s also an option to grant persistent sending permission for a specific chat, which skips that screen going forward – worth thinking twice about before you enable it.
Who actually has access right now
This isn’t rolling out to everyone with ChatGPT installed. Three gates, all of which have to be true at once:
- You need an Apple Silicon Mac. Intel is out, no exceptions mentioned.
- It only works in ChatGPT Work and Codex desktop sessions, not the standard chat interface, not web, not iOS or Android.
- OpenAI says it’s included on all ChatGPT plans, but plan access, desktop environment, and workspace settings all factor in – so “included” doesn’t mean everyone sees the plugin option today.
Workspace admins can also turn it off entirely for managed accounts through the existing Computer Use controls, which matters if you’re on a company ChatGPT plan and don’t control your own settings.
Privacy: the part worth slowing down for
Here’s the thing that should give you pause, and it’s not really about OpenAI being sneaky – it’s about what Messages actually contains. Addresses, financial details, half-finished arguments with your landlord, whatever your group chat says about your coworkers. Connecting an AI assistant to that is a different category of risk than linking Google Drive.
OpenAI told Bloomberg the plugin runs locally and doesn’t build an index of your entire message history. What “doesn’t index” means in practice isn’t fully spelled out, and that ambiguity is exactly what’s fueling most of the pushback online.
There’s also a documented bug worth knowing about: if your ChatGPT task is set to Full access – the mode that skips approval prompts generally – the confirmation screen for sending a message may fail to appear. The message just doesn’t send rather than sending without review, according to OpenAI’s own plugin guide. Still, if you’ve got Full access tasks running unattended, that’s a setting to double-check rather than assume works fine.
And then there’s the timing. Apple sued OpenAI last month over allegations tied to upcoming products, and Apple has previously killed off third-party tools that touched iMessage the way Beeper Mini did. Apple markets Messages as end-to-end encrypted and tightly controlled. A third-party AI reading that same data through Full Disk Access, while the two companies are suing each other, is not a neutral moment for this to launch in. Apple hasn’t blocked it yet. Whether that stays true is genuinely unclear.
Should you turn it on?
If you’re already living inside ChatGPT Work or Codex for other tasks, and you’re the kind of person who actually reads the approval prompt before hitting send – this is a real time-saver. Searching old threads and drafting replies without alt-tabbing between apps is the kind of small friction removal that adds up over a week.
If you’re not in Work or Codex already, or you’re not sure you’ll remember to check the permissions later, I’d hold off. Full Disk Access plus automation control over your personal messages is a lot to hand over for a convenience feature that’s a few weeks old. Let a few more update cycles pass and see how OpenAI handles the Full access bug and whatever Apple does next.
FAQ
Does the ChatGPT Apple Messages plugin work on iPhone?
No. It’s Mac-only, and specifically the desktop app – not iOS, not the web version of ChatGPT.
Can I text ChatGPT directly through iMessage?
No. The integration only goes one way: ChatGPT reads and sends through Messages on your Mac. You can’t message the bot itself from your phone.
Does it work on Intel Macs?
No. It requires Apple Silicon.
Will ChatGPT send messages without my approval?
Not by default. You approve the message content and recipients before anything sends, unless you’ve specifically granted persistent permission for a chat or you’re running a Full access task, which has a known bug around that confirmation step.
