Xcrew runs on your Mac with your permissions: it starts MCP servers, runs Xcode's tools and writes .mobilebuildmcp/ in your project. It makes no network request of its own.

Please report a vulnerability privately through GitHub's security advisories rather than an issue. Expect an answer within a week.

Xcrew also checks that Xcode's IDEAllowUnauthenticatedAgents is off: with it on, any unsigned process on the Mac can drive Xcode's tools.