A Guide to TCC Services on macOS Sequoia 15.0

macOS Sequoia 15.0 Privacy & Security Services
Basics of TCC Services on macOS

MacOS is known for its strong privacy and security features. One of the ways it ensures users are in control of their data and system resources is through TCC (Transparency, Consent, and Control) services. These services govern which apps can access sensitive information or interact with system-level resources such as your camera, microphone, contacts, and more. If you’ve ever used an app on MacOS and were asked for permission to access something like your location or calendar, that interaction is managed by the TCC framework.

In this guide, we’ll explore what TCC services are, why they matter, and complete list of all services of MacOS Sequoia 15.0.

What Are TCC Services?

TCC services control the permissions that apps request on MacOS. When an app tries to access something sensitive like your microphone or contacts, MacOS prompts you to grant or deny that access. This is a key part of how MacOS maintains user privacy and transparency, ensuring that apps only gain access to what you’ve approved.

These permissions cover a wide array of services, including:

  • Camera: Needed by apps like Zoom, FaceTime, or photo editors.
  • Microphone: Used by apps for recording audio, video conferencing, or speech recognition.
  • Contacts: Apps such as messaging platforms or email clients often need access to your contacts.
  • Bluetooth: Apps connecting to wireless accessories like headphones, speakers, or fitness devices will require Bluetooth permissions.

TCC services are essential to keeping apps from overstepping their boundaries, making sure that any sensitive data access is done with your explicit consent.

Role of TCC Services

The primary role of TCC services is to ensure that users remain in control of their privacy, preventing apps from accessing information they don’t have permission for. With cyber threats and data privacy concerns rising, having these checks and balances in place is critical.

For instance, without TCC services, an app could theoretically access your camera or microphone without you knowing. TCC database is protected by SIP and designed in such a way that, even a user with root permissions cannot modify it. MacOS will always prompt you before an app can use these features, making sure your device and personal data are secure.

TCC services also help maintain transparency. You can always review which apps have access to which services in System Settings > Privacy & Security > Privacy. This also allows you to revoke permissions from any app that you no longer trust.

List of TCC Services on MacOS Sequoia 15.0
TCC Service
Description
kTCCService
General TCC service identifier.
kTCCServiceAccessibility
Allows client to control computer.
kTCCServiceAddressBook
Allows access to the address book (contacts).
kTCCServiceAll
Provides access to all TCC services.
kTCCServiceAppleEvents
Grants access to send Apple Events.
kTCCServiceAudioCapture
Allows capturing audio input.
kTCCServiceBluetoothAlways
Allows Bluetooth access at all times.
kTCCServiceBluetoothPeripheral
Grants access to Bluetooth peripherals.
kTCCServiceBluetoothWhileInUse
Allows Bluetooth access only while in use.
kTCCServiceCalendar
Grants access to the calendar.
kTCCServiceCalls
Provides access to call-related features.
kTCCServiceCamera
Client would like to access the camera.
kTCCServiceContactlessAccess
Allows access to contactless device features.
kTCCServiceContactsFull
Grants full access to contacts.
kTCCServiceContactsLimited
Allows limited access to contacts.
kTCCServiceCrashDetection
Provides access to crash detection features.
kTCCServiceDeveloperTool
Access to developer tools and debugging features.
kTCCServiceEndpointSecurityClient
Allows access to endpoint security services.
kTCCServiceExposureNotification
Grants access to exposure notifications (e.g., COVID alerts).
kTCCServiceExposureNotificationRegion
Region-specific exposure notification services.
kTCCServiceFSKitBlockDevice
Access to block device management in FSKit.
kTCCServiceFaceID
Allows access to FaceID services.
kTCCServiceFacebook
Provides integration with Facebook services.
kTCCServiceFallDetection
Grants access to fall detection features.
kTCCServiceFileProviderDomain
Allows access to file provider domains.
kTCCServiceFileProviderPresence
Provides access to file provider presence data.
kTCCServiceFinancialData
Grants access to financial data.
kTCCServiceFocusStatus
Allows checking the user’s Focus Status.
kTCCServiceGameCenterFriends
Grants access to Game Center friends.
kTCCServiceKeyboardNetwork
Allows keyboard network access.
kTCCServiceLinkedIn
Provides integration with LinkedIn services.
kTCCServiceListenEvent
Access to listen to system-level events.
kTCCServiceLiverpool
Internal service identifier related to Liverpool feature.
kTCCServiceMSO
Grants access to mobile service operator features.
kTCCServiceMediaLibrary
Access to the user’s media library.
kTCCServiceMicrophone
Client would like to access the microphone.
kTCCServiceMotion
Provides access to motion sensors and data.
kTCCServiceNearbyInteraction
Grants access to nearby interaction services.
kTCCServicePasteboard
Allows access to the clipboard (pasteboard) data.
kTCCServicePhotos
Client would like to access the photos library.
kTCCServicePhotosAdd
Allows adding photos to the library.
kTCCServicePostEvent
Provides ability to post events to the system.
kTCCServicePrototype3Rights
Internal service identifier for prototype rights (version 3).
kTCCServicePrototype4Rights
Internal service identifier for prototype rights (version 4).
kTCCServiceReminders
Grants access to reminders.
kTCCServiceRemoteDesktop
Allows access to remote desktop features.
kTCCServiceScreenCapture
Provides access to screen capture capabilities.
kTCCServiceSecureElementAccess
Grants access to secure element (e.g., NFC) functions.
kTCCServiceSensorKitAmbientLightSensor
Provides access to ambient light sensor data.
kTCCServiceSensorKitBedSensing
Allows access to bed sensing data.
kTCCServiceSensorKitBedSensingWriting
Grants ability to write bed sensing data.
kTCCServiceSensorKitDeviceUsage
Provides access to device usage data.
kTCCServiceSensorKitElevation
Grants access to elevation sensor data.
kTCCServiceSensorKitFacialMetrics
Allows access to facial metrics data.
kTCCServiceSensorKitForegroundAppCategory
Grants access to foreground app category data.
kTCCServiceSensorKitHistoricalCardioMetrics
Allows access to historical cardio metrics.
kTCCServiceSensorKitHistoricalMobilityMetrics
Grants access to historical mobility metrics.
kTCCServiceSensorKitKeyboardMetrics
Provides access to keyboard metrics.
kTCCServiceSensorKitLocationMetrics
Allows access to location metrics data.
kTCCServiceSensorKitMessageUsage
Grants access to message usage data.
kTCCServiceSensorKitMotion
Provides access to motion sensor data.
kTCCServiceSensorKitMotionHeartRate
Grants access to heart rate metrics via motion sensors.
kTCCServiceSensorKitOdometer
Allows access to odometer data.
kTCCServiceSensorKitPedometer
Grants access to pedometer data.
kTCCServiceSensorKitPhoneUsage
Provides access to phone usage data.
kTCCServiceSensorKitSoundDetection
Allows access to sound detection services.
kTCCServiceSensorKitSpeechMetrics
Grants access to speech metrics.
kTCCServiceSensorKitStrideCalibration
Allows stride calibration via sensors.
kTCCServiceSensorKitWatchAmbientLightSensor
Provides access to watch’s ambient light sensor data.
kTCCServiceSensorKitWatchFallStats
Grants access to fall statistics via the watch.
kTCCServiceSensorKitWatchForegroundAppCategory
Allows access to the foreground app category on watch.
kTCCServiceSensorKitWatchHeartRate
Grants access to heart rate metrics via the watch.
kTCCServiceSensorKitWatchMotion
Provides access to watch motion sensor data.
kTCCServiceSensorKitWatchOnWristState
Allows access to the on-wrist state of the watch.
kTCCServiceSensorKitWatchPedometer
Grants access to watch pedometer data.
kTCCServiceSensorKitWatchSpeechMetrics
Provides access to speech metrics via the watch.
kTCCServiceSensorKitWristTemperature
Allows access to wrist temperature sensor data.
kTCCServiceShareKit
Grants access to ShareKit services for content sharing.
kTCCServiceSinaWeibo
Provides integration with Sina Weibo services.
kTCCServiceSiri
Grants access to Siri-related services.
kTCCServiceSpeechRecognition
Allows access to speech recognition features.
kTCCServiceSystemPolicyAllFiles
Grants access to all system files.
kTCCServiceSystemPolicyAppBundles
Allows access to application bundles.
kTCCServiceSystemPolicyAppData
Grants access to app-specific data.
kTCCServiceSystemPolicyDesktopFolder
Allows access to the desktop folder.
kTCCServiceSystemPolicyDeveloperFiles
Grants access to developer-related files.
kTCCServiceSystemPolicyDocumentsFolder
Allows access to the documents folder.
kTCCServiceSystemPolicyDownloadsFolder
Provides access to the downloads folder.
kTCCServiceSystemPolicyNetworkVolumes
Grants access to network volumes.
kTCCServiceSystemPolicyRemovableVolumes
Allows access to removable volumes.
kTCCServiceSystemPolicySysAdminFiles
Grants access to system administration files.
kTCCServiceTencentWeibo
Provides integration with Tencent Weibo services.
kTCCServiceTwitter
Allows integration with Twitter services.
kTCCServiceUbiquity
Grants access to iCloud ubiquity services.
kTCCServiceUserAvailability
Allows access to user availability information.
kTCCServiceUserTracking
Provides access to user tracking services.
kTCCServiceVirtualMachineNetworking
Grants access to virtual machine networking services.
kTCCServiceVoiceBanking
Allows access to voice banking services.
kTCCServiceWebBrowserPublicKeyCredential
Grants access to public key credentials for web browsers.
kTCCServiceWebKitIntelligentTrackingPrevention
Provides WebKit intelligent tracking prevention services.
kTCCServiceWillow
Internal service identifier related to Willow feature.

* Check the complete list on Github.

Fetching the Latest TCC Service List

Apple can change TCC services without any notice. You can follow below guidelines to fetch the latest list of TCC services on your system.

					```bash
cd /System/Library/PrivateFrameworks/TCC.framework/Support
strings tccd | grep -iEo "^kTCCService.*" | sort
```
				
Practical Uses of TCC Services

TCC services are used in a variety of scenarios:

  • Developers: Need to understand how their apps will request permissions for certain functionalities, such as accessing the camera for a video-calling app.
  • Security-conscious users: May want to ensure that no apps have been granted unnecessary access to sensitive data, like their contacts or messages.
  • Everyday macOS users: Should familiarize themselves with how to control app permissions to maintain their privacy, especially when downloading new apps.
Final Thoughts

The TCC framework plays a crucial role in keeping MacOS users safe by providing transparency and control over the data and services apps can access. As a user, understanding these services and how to manage them is essential to ensuring your privacy.

Remember that the list of TCC services may change over time as MacOS evolves, and new services are introduced. If you’re using a version of MacOS newer than Sequoia 15.0, you can check for updated services by querying the TCC database to ensure you have the latest permissions and settings. And while most services have been confirmed, not all of them are manually verified, so if you encounter any discrepancies, it’s a good idea to report them.

Taking the time to manage TCC permissions will give you peace of mind and help protect your personal information on your Mac Operating System.