Review your Mac apps' privacy permissions, including the ones you don't know about.
A local-first macOS utility for viewing and editing TCC.db app privacy permissions.Open a copy of Apple’s Transparency, Consent, and Control database, inspect every row, and make offline changes without touching the live system file.
Safety first: Always work on a copy of
TCC.db, not the live database.
Every time macOS asks "Allow this app to access your contacts?" your answer is saved in a SQLite database called TCC.db. TCC stands for Transparency, Consent, and Control — it is Apple's framework for managing app access to sensitive resources like the camera, microphone, location, contacts, and more.
The database lives at:
~/Library/Application Support/com.apple.TCC/TCC.db
Clearance lets you open that database, browse every permission row in a searchable table, and edit or revoke entries — no terminal required.
- Browse all TCC permission entries in a sortable, filterable table
- Edit permission values inline — click any cell to change it
- Revoke or grant access by modifying the
auth_valuecolumn (0 = deny, 2 = allow) - Filter by service (
kTCCService), app bundle ID, or access type - Dark and light mode, follows system appearance automatically
- Export a modified
.dbcopy with your changes applied - Local-first: no analytics, no accounts, and no backend service
- Go to the latest release
- Download the latest macOS release asset, if one is available
- Unzip it and drag
Clearance.appinto/Applications - Launch the app from
/Applications
On first launch, macOS may display a warning that the app is dangerous, with options to Move to Trash or Done. Click Done, then go to System Settings → Privacy & Security and click Open Anyway.
If no release is published yet, use Option B.
Requirements: macOS 12+, Xcode 15 or later
git clone https://github.com/cch1rag/Clearance.git
cd Clearance
open Clearance.xcodeprojPress ⌘R to build and run. No dependencies are required for a normal build. If you edit project.yml, regenerate Clearance.xcodeproj first with xcodegen generate.
-
Make a copy of your TCC database — never open the live file directly:
cp ~/Library/Application\ Support/com.apple.TCC/TCC.db ~/Desktop/TCC-copy.db
-
Open Clearance from your Applications folder.
-
Click Open Database and select the copy you just made.
-
Browse and filter the permission table. Click any row to edit values inline.
-
To apply changes to the real database, quit any apps that hold a lock on TCC.db, then replace the original with your edited copy:
cp ~/Desktop/TCC-copy.db ~/Library/Application\ Support/com.apple.TCC/TCC.db
This step requires SIP (System Integrity Protection) to be off for system-level entries. User-level entries in the copy can be edited freely.
Clearance operates on files you explicitly choose on your Mac. It does not upload databases, use analytics, require an account, or depend on a backend service.
Clearance bundles sql.js 1.10.3 and its WASM file inside the app, so the shipped app does not need internet access to open or edit databases.
Clearance never reads your actual TCC database automatically — you choose which file to open.
- Swift and AppKit for the native macOS shell
- WKWebView to host the interactive table UI
- Bundled sql.js 1.10.3 (SQLite compiled to WebAssembly) for parsing
.dbfiles in the web layer - Vanilla HTML, CSS, and JavaScript — no frontend frameworks
 |
 |
|
 |
 |
 |
Chirag Chopra — github.com/cch1rag
MIT — see LICENSE for details.