Startup & Background Items
Everything that launches itself — list, enable, disable.
5 tools — 2 read-only, 3 that always ask your approval first.
Read-only tools never modify anything; anything that changes your Mac pauses on an Approve card first.
list_startup_items Read-onlyList the apps and background agents that launch at login, and how many are third-party or suspicious.
disable_startup_item Asks firstDisable a login/startup item by name so it no longer launches at boot. Provide the item's label or filename.
enable_startup_item Asks firstRe-enable a previously disabled login/startup item so it launches at boot again (the undo of disable_startup_item). Provide the item's label or filename.
list_launch_services Read-onlyList the background launchd services currently loaded, with a count of non-Apple ones. Complements list_startup_items (which covers login items).
disable_service Asks firstShut a remote-access door on this Mac. service = 'remote_login' (SSH), 'screen_sharing', 'remote_management' (ard), or 'file_sharing' (SMB). Needs admin.