install

Additional install commands

macOS

Homebrewverified · 100%

brew install tccutil

local Homebrew formula metadata

overview

Package summary

Utility to modify the macOS Accessibility Database (TCC.db)

Project links

Homepage

Commands and aliases

tccutil

history

Project history and usage

tccutil.py is a macOS command-line utility for manipulating the Transparency, Consent, and Control database used for privacy and Accessibility permissions.

Project history

The upstream README frames the tool as a response to Apple's built-in /usr/bin/tccutil, which only supports resetting the database. Jacob Salmela's version was created to add command-line operations such as listing, inserting, removing, enabling, and disabling entries in TCC.db.

The GitHub repository was created in 2014, and later README text documents both system-wide and per-user TCC database handling, plus the practical constraint that disabling SIP may be required for direct database modification.

Adoption history

Its package-manager interest comes from being a small macOS administration tool that Homebrew can place earlier in PATH than Apple's similarly named utility, giving administrators a more scriptable interface for permission resets and Accessibility database edits.

How it is used

Common usage is macOS-only and administrative: list TCC database entries, add or remove bundle IDs and paths, enable or disable Accessibility access, or delegate reset operations to Apple's native tccutil.

Why package nerds care

Package nerds care because it represents a familiar Homebrew pattern: wrapping a narrow, platform-specific system gap in a tiny CLI that can be installed, versioned, audited, and scripted instead of copied around as an ad hoc admin script.

Timeline

2014: GitHub repository for jacobsalmela/tccutil created.
2020: tccutil.py copyright notice in the source identifies active project authorship.
2025: README documents global and per-user TCC database handling.

Related projects

Apple /usr/bin/tccutil is the native reset-only utility that this project wraps and extends.
The README names Privacy Manager Services, tccmanager.py, go-tccutil, tccplus, and DocSystem/tccutil as related approaches.

Sources

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

broad file, network, media, or database tool signal

Signals

text:database

Install behavior

No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`tccutil`	executable	indexed executable	Discovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03

manager version1.5.1

manager updated

local dataunknown

upstreamnot available

latest detectednot detected

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:tccutil
Version	1.5.1
Package manager	Homebrew
Homepage	https://github.com/jacobsalmela/tccutil
Repository	https://github.com/jacobsalmela/tccutil
Bottle	not recorded
Service	none declared

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/tccutil.yml

Used sources

Geiger risk classifier
cross-ecosystem install command graph
curated package history
pkg.so package database
pkgdb category and tag curation

Install tccutil with Homebrew