Basics of TCC Services on macOS
MacOS is known for its strong privacy and security features. One of the ways it ensures users are in control of their data and system resources is through TCC (Transparency, Consent, and Control) services. These services govern which apps can access sensitive information or interact with system-level resources such as your camera, microphone, contacts, and more. If you’ve ever used an app on MacOS and were asked for permission to access something like your location or calendar, that interaction is managed by the TCC framework.
In this guide, we’ll explore what TCC services are, why they matter, and complete list of all services of MacOS Sequoia 15.0.
What Are TCC Services?
TCC services control the permissions that apps request on MacOS. When an app tries to access something sensitive like your microphone or contacts, MacOS prompts you to grant or deny that access. This is a key part of how MacOS maintains user privacy and transparency, ensuring that apps only gain access to what you’ve approved.
These permissions cover a wide array of services, including:
- Camera: Needed by apps like Zoom, FaceTime, or photo editors.
- Microphone: Used by apps for recording audio, video conferencing, or speech recognition.
- Contacts: Apps such as messaging platforms or email clients often need access to your contacts.
- Bluetooth: Apps connecting to wireless accessories like headphones, speakers, or fitness devices will require Bluetooth permissions.
TCC services are essential to keeping apps from overstepping their boundaries, making sure that any sensitive data access is done with your explicit consent.
Role of TCC Services
The primary role of TCC services is to ensure that users remain in control of their privacy, preventing apps from accessing information they don’t have permission for. With cyber threats and data privacy concerns rising, having these checks and balances in place is critical.
For instance, without TCC services, an app could theoretically access your camera or microphone without you knowing. TCC database is protected by SIP and designed in such a way that, even a user with root permissions cannot modify it. MacOS will always prompt you before an app can use these features, making sure your device and personal data are secure.
TCC services also help maintain transparency. You can always review which apps have access to which services in System Settings > Privacy & Security > Privacy. This also allows you to revoke permissions from any app that you no longer trust.
List of TCC Services on MacOS Sequoia 15.0
TCC Service | Description | kTCCService | General TCC service identifier. |
|---|---|
kTCCServiceAccessibility | Allows client to control computer. |
kTCCServiceAddressBook | Allows access to the address book (contacts). |
kTCCServiceAll | Provides access to all TCC services. |
kTCCServiceAppleEvents | Grants access to send Apple Events. |
kTCCServiceAudioCapture | Allows capturing audio input. |
kTCCServiceBluetoothAlways | Allows Bluetooth access at all times. |
kTCCServiceBluetoothPeripheral | Grants access to Bluetooth peripherals. |
kTCCServiceBluetoothWhileInUse | Allows Bluetooth access only while in use. |
kTCCServiceCalendar | Grants access to the calendar. |
kTCCServiceCalls | Provides access to call-related features. |
kTCCServiceCamera | Client would like to access the camera. |
kTCCServiceContactlessAccess | Allows access to contactless device features. |
kTCCServiceContactsFull | Grants full access to contacts. |
kTCCServiceContactsLimited | Allows limited access to contacts. |
kTCCServiceCrashDetection | Provides access to crash detection features. |
kTCCServiceDeveloperTool | Access to developer tools and debugging features. |
kTCCServiceEndpointSecurityClient | Allows access to endpoint security services. |
kTCCServiceExposureNotification | Grants access to exposure notifications (e.g., COVID alerts). |
kTCCServiceExposureNotificationRegion | Region-specific exposure notification services. |
kTCCServiceFSKitBlockDevice | Access to block device management in FSKit. |
kTCCServiceFaceID | Allows access to FaceID services. |
kTCCServiceFacebook | Provides integration with Facebook services. |
kTCCServiceFallDetection | Grants access to fall detection features. |
kTCCServiceFileProviderDomain | Allows access to file provider domains. |
kTCCServiceFileProviderPresence | Provides access to file provider presence data. |
kTCCServiceFinancialData | Grants access to financial data. |
kTCCServiceFocusStatus | Allows checking the user’s Focus Status. |
kTCCServiceGameCenterFriends | Grants access to Game Center friends. |
kTCCServiceKeyboardNetwork | Allows keyboard network access. |
kTCCServiceLinkedIn | Provides integration with LinkedIn services. |
kTCCServiceListenEvent | Access to listen to system-level events. |
kTCCServiceLiverpool | Internal service identifier related to Liverpool feature. |
kTCCServiceMSO | Grants access to mobile service operator features. |
kTCCServiceMediaLibrary | Access to the user’s media library. |
kTCCServiceMicrophone | Client would like to access the microphone. |
kTCCServiceMotion | Provides access to motion sensors and data. |
kTCCServiceNearbyInteraction | Grants access to nearby interaction services. |
kTCCServicePasteboard | Allows access to the clipboard (pasteboard) data. |
kTCCServicePhotos | Client would like to access the photos library. |
kTCCServicePhotosAdd | Allows adding photos to the library. |
kTCCServicePostEvent | Provides ability to post events to the system. |
kTCCServicePrototype3Rights | Internal service identifier for prototype rights (version 3). |
kTCCServicePrototype4Rights | Internal service identifier for prototype rights (version 4). |
kTCCServiceReminders | Grants access to reminders. |
kTCCServiceRemoteDesktop | Allows access to remote desktop features. |
kTCCServiceScreenCapture | Provides access to screen capture capabilities. |
kTCCServiceSecureElementAccess | Grants access to secure element (e.g., NFC) functions. |
kTCCServiceSensorKitAmbientLightSensor | Provides access to ambient light sensor data. |
kTCCServiceSensorKitBedSensing | Allows access to bed sensing data. |
kTCCServiceSensorKitBedSensingWriting | Grants ability to write bed sensing data. |
kTCCServiceSensorKitDeviceUsage | Provides access to device usage data. |
kTCCServiceSensorKitElevation | Grants access to elevation sensor data. |
kTCCServiceSensorKitFacialMetrics | Allows access to facial metrics data. |
kTCCServiceSensorKitForegroundAppCategory | Grants access to foreground app category data. |
kTCCServiceSensorKitHistoricalCardioMetrics | Allows access to historical cardio metrics. |
kTCCServiceSensorKitHistoricalMobilityMetrics | Grants access to historical mobility metrics. |
kTCCServiceSensorKitKeyboardMetrics | Provides access to keyboard metrics. |
kTCCServiceSensorKitLocationMetrics | Allows access to location metrics data. |
kTCCServiceSensorKitMessageUsage | Grants access to message usage data. |
kTCCServiceSensorKitMotion | Provides access to motion sensor data. |
kTCCServiceSensorKitMotionHeartRate | Grants access to heart rate metrics via motion sensors. |
kTCCServiceSensorKitOdometer | Allows access to odometer data. |
kTCCServiceSensorKitPedometer | Grants access to pedometer data. |
kTCCServiceSensorKitPhoneUsage | Provides access to phone usage data. |
kTCCServiceSensorKitSoundDetection | Allows access to sound detection services. |
kTCCServiceSensorKitSpeechMetrics | Grants access to speech metrics. |
kTCCServiceSensorKitStrideCalibration | Allows stride calibration via sensors. |
kTCCServiceSensorKitWatchAmbientLightSensor | Provides access to watch’s ambient light sensor data. |
kTCCServiceSensorKitWatchFallStats | Grants access to fall statistics via the watch. |
kTCCServiceSensorKitWatchForegroundAppCategory | Allows access to the foreground app category on watch. |
kTCCServiceSensorKitWatchHeartRate | Grants access to heart rate metrics via the watch. |
kTCCServiceSensorKitWatchMotion | Provides access to watch motion sensor data. |
kTCCServiceSensorKitWatchOnWristState | Allows access to the on-wrist state of the watch. |
kTCCServiceSensorKitWatchPedometer | Grants access to watch pedometer data. |
kTCCServiceSensorKitWatchSpeechMetrics | Provides access to speech metrics via the watch. |
kTCCServiceSensorKitWristTemperature | Allows access to wrist temperature sensor data. |
kTCCServiceShareKit | Grants access to ShareKit services for content sharing. |
kTCCServiceSinaWeibo | Provides integration with Sina Weibo services. |
kTCCServiceSiri | Grants access to Siri-related services. |
kTCCServiceSpeechRecognition | Allows access to speech recognition features. |
kTCCServiceSystemPolicyAllFiles | Grants access to all system files. |
kTCCServiceSystemPolicyAppBundles | Allows access to application bundles. |
kTCCServiceSystemPolicyAppData | Grants access to app-specific data. |
kTCCServiceSystemPolicyDesktopFolder | Allows access to the desktop folder. |
kTCCServiceSystemPolicyDeveloperFiles | Grants access to developer-related files. |
kTCCServiceSystemPolicyDocumentsFolder | Allows access to the documents folder. |
kTCCServiceSystemPolicyDownloadsFolder | Provides access to the downloads folder. |
kTCCServiceSystemPolicyNetworkVolumes | Grants access to network volumes. |
kTCCServiceSystemPolicyRemovableVolumes | Allows access to removable volumes. |
kTCCServiceSystemPolicySysAdminFiles | Grants access to system administration files. |
kTCCServiceTencentWeibo | Provides integration with Tencent Weibo services. |
kTCCServiceTwitter | Allows integration with Twitter services. |
kTCCServiceUbiquity | Grants access to iCloud ubiquity services. |
kTCCServiceUserAvailability | Allows access to user availability information. |
kTCCServiceUserTracking | Provides access to user tracking services. |
kTCCServiceVirtualMachineNetworking | Grants access to virtual machine networking services. |
kTCCServiceVoiceBanking | Allows access to voice banking services. |
kTCCServiceWebBrowserPublicKeyCredential | Grants access to public key credentials for web browsers. |
kTCCServiceWebKitIntelligentTrackingPrevention | Provides WebKit intelligent tracking prevention services. |
kTCCServiceWillow | Internal service identifier related to Willow feature. |
* Check the complete list on Github.
Fetching the Latest TCC Service List
Apple can change TCC services without any notice. You can follow below guidelines to fetch the latest list of TCC services on your system.
```bash
cd /System/Library/PrivateFrameworks/TCC.framework/Support
strings tccd | grep -iEo "^kTCCService.*" | sort
```
Practical Uses of TCC Services
TCC services are used in a variety of scenarios:
- Developers: Need to understand how their apps will request permissions for certain functionalities, such as accessing the camera for a video-calling app.
- Security-conscious users: May want to ensure that no apps have been granted unnecessary access to sensitive data, like their contacts or messages.
- Everyday macOS users: Should familiarize themselves with how to control app permissions to maintain their privacy, especially when downloading new apps.
Final Thoughts
The TCC framework plays a crucial role in keeping MacOS users safe by providing transparency and control over the data and services apps can access. As a user, understanding these services and how to manage them is essential to ensuring your privacy.
Remember that the list of TCC services may change over time as MacOS evolves, and new services are introduced. If you’re using a version of MacOS newer than Sequoia 15.0, you can check for updated services by querying the TCC database to ensure you have the latest permissions and settings. And while most services have been confirmed, not all of them are manually verified, so if you encounter any discrepancies, it’s a good idea to report them.
Taking the time to manage TCC permissions will give you peace of mind and help protect your personal information on your Mac Operating System.
