ClickRelay: Let Your Coding Agent Use Your Mac, On Your Terms

Name: ClickRelay
Author: Mergeable Pty Ltd

Your terminal never needs Screen Recording

Agents are good at checking their own work in Simulator or a browser. The usual way to let them is to give your terminal Screen Recording and Accessibility, which lets anything running in it see and drive your whole Mac, with no end date.

ClickRelay holds those two permissions itself and lends them out a few minutes at a time.

You pick the apps and the time

When an agent asks, tick the apps you're happy to share and choose 5, 15 or 30 minutes, an hour, or any length you like. Touch ID confirms it. Each unlock covers one agent session, so a second agent can't use access meant for the first.

Screen lock, sleep, switching users or ⌃⌥⌘L from anywhere locks it again straight away.

ClickRelay showing Claude Code asking to use Device Hub and Safari, with its reason, the apps to tick and how long to allow

Other apps stay out of reach

Screenshots only include the apps you allowed. Before every click, ClickRelay checks the window belongs to one of them and isn't covered by something else. Keystrokes only go to an allowed app in front.

System Settings, password managers, login prompts, the Dock and the terminal your agent runs in can't be allowed at all.

You stay in the loop

When an agent hits a password, a 2FA code, a CAPTCHA or a payment, it hands that window to you and waits. You do the bit only you should do, click Done, and it carries on.

A coloured border shows which windows the agent is using, and it tells you when it's finished so you know you can have the Mac back.

Calculator with ClickRelay's orange border and a tag naming the agent using it and the time left

ClickRelay showing an agent's message that it finished, above its locked card

Set up in a minute

Open ClickRelay and follow the checklist: grant the two permissions, take a test screenshot, then add it to your agent. For Claude Code that's one command:

claude mcp add --scope user clickrelay -- /Applications/ClickRelay.app/Contents/MacOS/ClickRelay --mcp

The app has copy-and-paste config for Codex CLI, Cursor, Windsurf, VS Code (GitHub Copilot), Zed and Antigravity as well.

Everything in ClickRelay

Unlock with Touch ID, Touch ID or your password, or a hold-to-confirm Authorize button.
Quick durations of 5, 15 and 30 minutes or an hour, plus any custom length.
Extend from the app, the menu bar or the notification a minute before expiry. Extending asks you to unlock again.
Locks when every allowed app quits, and after an optional idle timeout.
Agents read the UI tree and press buttons or fill fields by reference, so nothing depends on pixel positions.
Coordinate clicks, drags and scrolls for everything Accessibility can't reach.
Menu bar commands run directly, without opening menus.
Shortcuts that could move focus elsewhere, like ⌘Tab, ⌘Space and Mission Control, are blocked.
Agents can ask for access, more apps or more time, with a short reason you see before deciding.
Agents can save a sequence of steps as a script and replay it later in one call, with every step checked like a single call.
Every call listed under its agent, with refusals highlighted and screenshot thumbnails.
A daily JSON Lines audit log on your Mac. Typed text is redacted unless you turn that off.
Countdown in the menu bar and on the Dock icon.
No account, no cloud and no network listener. The agent talks to it over a local socket.

Nothing an agent sends can widen its access

Only a person at the Mac can unlock, extend or add apps, and each of those needs Touch ID or a real click. The source is on GitHub, so you can check that for yourself.

Frequently asked questions

Which coding agents work with ClickRelay?

Any agent that can use a local MCP server. The app has ready-to-copy setup for Claude Code, Codex CLI, Cursor, Windsurf, VS Code with GitHub Copilot, Zed and Antigravity.

Why not give my terminal Screen Recording and Accessibility instead?

Those permissions have no time limit and no app list. Anything running in that terminal could see your whole screen and type into any app, at any time. ClickRelay holds the permissions itself and only lends them out after you unlock it, for the apps you picked.

Can an agent unlock ClickRelay or give itself more time?

No. An agent can ask, with a reason, but only you can unlock, extend or add apps, and each of those needs Touch ID (or the hold-to-confirm Authorize button on Macs without it). ClickRelay itself, System Settings and login prompts are never allowed, so an agent can't click its way around this.

What happens when an agent reaches a password or 2FA prompt?

It hands that window to you. ClickRelay shows what the agent needs, stops all agent input until you click Done or Can't Do This, then the agent carries on. ClickRelay never sees, stores or types your secrets.

Does ClickRelay send my screen anywhere?

ClickRelay has no account, no cloud and no network listener. Screenshots go only to the agent that asked for them, over a local socket. What your agent then does with them depends on the agent and the model you use.

Is ClickRelay finished?

It's in beta. It works day to day, but tools and settings may change between releases. Please report anything odd on GitHub.

How much does ClickRelay cost?

It's free. Download it from GitHub Releases, where builds are signed with Developer ID and notarized by Apple. The source is on GitHub too.

Let your agent check its own work

Free for macOS 15 and later. Pick the apps, pick the time, and get on with something else.

Download for Mac View on GitHub

Free · macOS 15+ · beta