System Info & Diagnostics

Report this Mac's hardware and OS at a glance: model, chip (Apple Silicon or Intel), CPU cores, RAM, macOS version + build, and uptime.

Report deeper hardware specifications that system_overview doesn't cover: the GPU/graphics (model, GPU cores or vram, Metal support), the connected displays with resolutions, and startup-disk storage (total/free/percent used).

Report laptop battery health and current power source: cycle count, condition, maximum capacity, charge state, and on_ac_power (true=plugged in). Returns has_battery=false on desktops.

Report whether the CPU is currently being thermally throttled (speed-limited) and by how much.

Report this Mac's real memory health: system memory pressure (the number that matters — not 'memory used', which is normally high by design), swap usage, and compressed memory, with plain-English advice.

List the third-party kernel extensions and system extensions loaded on this Mac (Apple's own are filtered out). These are deep-privilege drivers (VPNs, antivirus, virtualization, audio).

List the configuration profiles installed on this Mac and whether it is enrolled in MDM (remote device management). Profiles can silently set DNS, proxies, certificates, and browser policy — adware installs them, and companies/schools use them legitimately.

Remove an installed configuration profile by its identifier (from list_config_profiles). Profiles can silently set DNS, proxies, certificates, and browser policy — adware installs them. Needs admin. MDM/enrollment profiles often can't be removed this way (the tool reports honestly if macOS refuses). Use after list_config_profiles finds an unwanted profile.

List certificate trust settings that were added manually or by installed software (Apple's built-in roots never appear here — an empty result is the clean state). An unexpected trusted root certificate can let software silently decrypt the user's HTTPS traffic.

Remove the manual TRUST setting from a user/admin-added root certificate by its name (from list_trusted_root_certs). An unexpected trusted root can let software silently decrypt HTTPS traffic; untrusting it closes that. This resets trust (reversible) rather than deleting the certificate. Apple's built-in roots are never touched. Needs admin. Use after list_trusted_root_certs shows an unexpected certificate.

Verify who made a specific app or file and whether macOS trusts it: code signature (signer, team), Gatekeeper/notarization verdict, and quarantine status, with a plain-English trust verdict. Works on paths in /Applications, /System/Applications, or the home folder.

List the extensions installed in the user's Chromium-family browsers (Chrome, Edge, Brave, Arc, Vivaldi, Opera, Chromium) with each extension's risky permissions flagged in plain English (e.g. can read every website).

List the recent app crash/hang reports on this Mac (last 14 days), grouped per app with counts and the latest date.

Report when this Mac last started up and its recent sleep/wake/restart history with the reason macOS recorded for each (read from the power-management log, fast). Explains 'DarkWake' background wakes vs real user wakes.

Search this Mac's recent system log (Unified Log) for a specific term and return the matching entries — bounded and read-only. Remind the user that scary-looking log lines are normal on a healthy Mac. Window defaults to the last 60 minutes (max 1440 = 24h).

List what's currently keeping this Mac (or its display) awake — the apps holding 'power assertions' that block sleep. Read-only.