mac-os-debloat

Debloat your Mac from the terminal. Zero dependencies. Zero install.

Interactive console util to disable 270 non-essential macOS launchd services. Reclaims ~1.5-2 GB RAM and a chunk of CPU for whatever heavy work you're actually doing. Fully reversible. Built for macOS Tahoe 26.x on Apple Silicon. Verify with debloat --status, which reports what is actually in effect and how many of the services are running right now — including after a reboot (see below).

No SIP disable required — works with System Integrity Protection fully on, via Apple's supported launchctl disable. That covers ~90-95% of the bloat with zero security tradeoff; squeezing the last few daemons means turning SIP off permanently, which isn't worth it for most people. It also validates every service against your actual system at launch, so it never acts on a label that doesn't exist on your macOS build.

npx -y @oleksandr_krupko/mac-os-debloat

Or via curl:

curl -fsSL https://raw.githubusercontent.com/OleksandrKrupko/mac-os-debloat/main/debloat | python3

Or via Homebrew:

brew install OleksandrKrupko/debloat/debloat && debloat

All three methods need python3 — preinstalled with the Xcode Command Line Tools (xcode-select --install if it's missing). No SIP disable required. The curl one-liner pipes the script to python3, so it reopens /dev/tty for the interactive keys; if you have no terminal attached, use the non-interactive flags below or the npx launcher.

Commands

Runs the interactive TUI by default. Non-interactive flags for scripting and quick recovery:

debloat                    # interactive TUI (default)
debloat --preset telemetry # disable analytics, crash reports, ads, beta enrollment (46)
debloat --preset balanced  # telemetry + Siri, Apple Intelligence, iMessage, Family (172)
debloat --list             # print every label, in preset file format
debloat --status           # per-domain disabled/enabled counts, how many are running, spotlight, RAM
debloat --audit            # list any embedded labels not present on your macOS build
debloat --disable-all      # disable every label, no exceptions (prompts sudo)
debloat --enable-all       # re-enable everything — the panic button
debloat --restore          # revert to the state before your last apply
debloat --dry-run          # with --preset/--disable-all/--enable-all: preview only
debloat --status --json    # machine-readable status

--status, --audit, --list, and --dry-run need no sudo — reading launchd state is unprivileged. Every apply first snapshots your current state to ~/.mac-os-debloat/latest.json, so --restore always brings you back. If anything feels off, debloat --enable-all turns it all back on.

Presets

Three rungs, safest first. A preset disables its own labels, leaves everything else exactly as it is, and never re-enables anything.

	disables	what you lose
--preset telemetry	46	nothing — analytics, crash reports, Apple ads, Biome, beta enrollment
--preset balanced	172	Siri, Apple Intelligence, iMessage/FaceTime/Continuity, Family, News/Stocks/Weather, nags
--disable-all	270	everything, console only — iCloud login, App Store purchases and macOS Update installs break

Counts are before pruning: the tool drops labels that don't exist on your macOS build, so what it prints is a little lower.

Neither preset touches Apple ID auth (akd, appleaccountd, adid, AppSSODaemon, AppSSOAgent, identityservicesd), App Store commerce, FairPlay or bridgeOS — 27 labels. Only --disable-all and your own presets can reach those.

98 labels sit between balanced and --disable-all — Safari, Photos, Music/TV/Books, Maps, Time Machine, Contacts/Calendar/Mail, Game Center, HomeKit, Screen Time, iCloud sync, print. Which of those you want is personal, so there's no preset for it: make your own.

To turn something back on, use the TUI (space toggles an item, enter applies), --restore, or --enable-all.

Make your own preset

mkdir -p ~/.mac-os-debloat/presets
debloat --list > ~/.mac-os-debloat/presets/mine.txt   # every label, or --list --preset balanced
$EDITOR ~/.mac-os-debloat/presets/mine.txt            # delete the lines for services to keep running
debloat --preset mine --dry-run                       # check
debloat --preset mine

A preset file is a plain list of labels. --list output is valid input, so it round-trips. Sections and comments are optional and only there to be readable:

# === Your section ===
com.apple.something                # what it does, what breaks

--preset NAME looks for ~/.mac-os-debloat/presets/NAME.txt first, then the built-in names — so presets/balanced.txt replaces the built-in balanced with yours.

Add your own labels

~/.mac-os-debloat/labels.txt is appended to the built-in list, in the same format. Labels there show up in the TUI, --list and --disable-all. They are not in the built-in presets — put them in your own preset for that.

Screenshot

mac-os-debloat  —  space=toggle  x=sec-toggle  s/S=sec-off/on  [/]=jump  a/n=all/none  p=spotlight  enter=apply  q=quit
pending: 4   (spotlight: ON)   (checked = enabled/running)

── Siri / voice assistant ──────────────────────────────────────────────────
 *[ ]  com.apple.assistantd                          Siri core
 *[ ]  com.apple.Siri.agent                          Siri agent
  [ ]  com.apple.SiriTTSTrainingAgent                Siri voice training
  [ ]  com.apple.siriinferenced                      on-device Siri inference
 *[ ]  com.apple.siriknowledged                      Siri knowledge graph
  [ ]  com.apple.assistant_cdmd                      Siri continuous dialog manager
  [✓]  com.apple.parsecd                             Siri/Spotlight suggestions backend
  [✓]  com.apple.parsec-fbf                          Siri Suggestions feedback
 *[ ]  com.apple.intelligencecontextd                Apple Intelligence context runtime
  [✓]  com.apple.intelligenceplatformd               Apple Intelligence platform

── Apple Intelligence (Tahoe) ────────────────────────────────────────────── ↓
  [✓]  com.apple.mlruntimed                          ML runtime
► [✓]  com.apple.privatecloudcomputed                Private Cloud Compute (AI cloud offload)
  [✓]  com.apple.modelmanagerd                       AI model manager / downloads
  [✓]  com.apple.naturallanguaged                    NaturalLanguage framework daemon
  [✓]  com.apple.generativeexperiencesd              Writing Tools / generative AI
  [✓]  com.apple.contextstored                       context store (>30GB memory leak)

What it disables

270 labels across 69 sections. Highlights:

• Siri / voice assistant (12)
• Apple Intelligence — Tahoe (10), incl. contextstored (known >30 GB memory leak) and privatecloudcomputed
• More AI / Apple Intelligence (11) — CoreSpotlight semantic, call intelligence, intelligence flow / tasks
• Diagnostics extras (30) — all telemetry to Apple
• Apple Music Player (AMP) suite (5), Apple Music / iTunes / Media streaming (7)
• Safari + Safari extras (7) — for non-Safari users
• Game Center, Game controllers, Game policy (7)
• Family / Parental controls (8)
• Beta program enrollment (6)
• iMessage / FaceTime / phone relay (10)
• Apple Mail / Calendar / Contacts / Reminders + AddressBook (7)
• Continuity / AirPlay / Sidecar / Continuity Capture (~8)
• Maps, Apple Books, Apple TV+, Stocks/News/Weather/Sports
• App Store + Apple ID + Apple Pay + SSO
• iCloud Drive / Keychain Circle / Notifications
• Print (no printer), Touch Bar (M4 has none), bridgeOS (Apple Silicon)
• Xcode / iOS dev stack (FE/BE dev, no mobile)
• Telemetry + Apple ads + Proactive / predictive + News / Stocks / Weather

Full curated list with per-label comments lives inside the script (EMBEDDED_LABELS).

Keys

Key	Action
↑ / ↓ or j / k	navigate
PgUp / PgDn	jump 10
[ / ]	jump to prev / next section
space	toggle current item
x	toggle whole section under cursor
s / S	uncheck / check whole section
a / n	check / uncheck all
p	toggle Spotlight indexing on root volume
enter	apply changes (prompts sudo)
r	reload state from system
q / esc	quit

[✓] = enabled · [ ] = disabled · * = unsaved change

Details

Persistence

Uses launchctl disable, which writes an override table per launchd domain: system jobs (a LaunchDaemons plist) go to /var/db/com.apple.xpc.launchd/disabled.plist, gui/$UID jobs (a LaunchAgents plist) to disabled.$UID.plist. An override only takes effect in the domain the job is actually registered in, so the tool resolves each label's domains and writes only there.

• Wiped by macOS major upgrades (26.3 → 26.4 etc) — re-run after upgrade
• system/ disables affect all users · gui/$UID disables only current user
• Multi-user: run once per account

Reboot persistence is not guaranteed on macOS 26.x. Measured on 26.5.2 (25F84) with SIP enabled: after a boot, 264 of the 268 catalog labels had no override in effect in the domain their job runs in, and 104 of them were running. disabled.plist held 258 overrides, disabled.$UID.plist only 95, and both files had been rewritten one minute after boot. The write itself is fine — sudo launchctl disable gui/$UID/<agent> returns 0 and the key appears in disabled.$UID.plist immediately — so the overrides are lost after the apply, not during it. The mechanism is not established. Reported in #8.

So don't trust it, check it: debloat --status reports the per-domain truth plus how many of the labels are running right now. If that count is non-zero after a reboot, re-apply. Every apply also verifies itself and prints any label whose override did not take effect, rather than reporting success.

Troubleshooting

Boot-out failed: 150: Operation not permitted while System Integrity Protection is engaged (e.g. on com.apple.followupd) Expected for daemons Apple protects even from a live bootout, and not a reason to disable SIP. bootout only kills the running process, and when it fails that process keeps running until it exits on its own — launchctl disable stops the next launch, it does not stop a live one. The two are separate steps and are now reported separately. An apply prints how many bootouts failed and with which message, lists any disable that failed outright, and then re-reads launchd to name every label whose override did not end up in effect. Trust that list, not the "N disabled" count.

--status says a service is disabled but it's still running (pre-0.7.0) Up to 0.6.0 --status treated a label as disabled if either domain had an override, so an override written to the domain the job doesn't run in read as success. 0.7.0 resolves each label's real domains and requires an override in every one, and prints a live count of catalog services still running. Re-apply after upgrading — the earlier applies may not have taken effect.

iCloud / App Store operations time out on UDP 443, looking exactly like a VPN or firewall block They aren't. The local daemon the request is handed to (identityservicesd, appstoreagent, akd, …) isn't running to answer it, so the request never leaves. Check debloat --status before touching network settings. Only reachable via --disable-all or your own preset — no built-in preset disables those.

macOS Update finds and downloads an update, then never installs it — no error, no dialog bridgeOSUpdateProxy / bosreporter / boswatcher are required for macOS Update installs on Apple Silicon too, not only Intel T2. No preset disables them; only --disable-all does. Turn them back on in the TUI, or with --restore / --enable-all. Reported on macOS 26.6 by #7; not reproduced here.

AKAnisetteError Code=-8025 on iCloud sign-in after disabling Siri Reported on Tahoe: com.apple.Siri.agent provides Mach services the sign-in dialog consults even with Siri off. --preset balanced disables it. If you hit this, re-enable com.apple.Siri.agent from the TUI. Reported in #7; not reproduced here.

Don't disable these

These will break the system. Not in default list, but if you add manually:

• com.apple.WindowServer, controlcenter, notificationcenterui, Finder, Dock, SystemUIServer — UI dies
• com.apple.coreaudiod — sound dies
• com.apple.accountsd, syspolicyd, securityd, trustd — auth / codesign break
• com.apple.mds*, corespotlightd — use mdutil -a -i off instead
• com.apple.softwareupdated — kills security updates
• com.apple.XprotectService — kills malware scanning
• com.apple.CoreLocationAgent, searchpartyd — Find My breaks

Why

macOS Tahoe (26.x) baselines at ~4-5 GB RAM and a steady CPU drip from ~50 Apple daemons you mostly don't use — Siri, Apple Intelligence, telemetry, ads, predictions, AirPlay, Photos analysis, etc. On a 16 GB Mac that's a third of your memory gone before any of your own apps start.

This tool kills the ones you don't need with a single console util and no install. ~1.5 GB RAM and a few % CPU back for whatever you're actually running — compilers, browsers, VMs, model inference, video editing, games, whatever.

The ~1.5-2 GB figure is the drop in used memory on an idle M4 MacBook Pro 16 GB (macOS 26.3.1) after disabling the full default set and rebooting, compared beforehand. Your number depends on which services you actually run — check debloat --status for the reclaimable RAM on your own machine before and after.

Comparison

Tool	Console UI	Curated list	Persistent	No SIP disable	Zero install
mac-os-debloat	✓	✓ 270 labels	launchctl disable + verified per domain (caveat)	✓	✓ Python stdlib
launchtui	✓	✗ generic	✗ bootout only	✓	✗ cargo install
Silverback-Debloater	✗	✓	✓	✓	✗ Intel-desktop only
b0gdanw Tahoe gist	✗	✓	✓	✗ needs SIP off	gist copy
LaunchControl / Lingon	GUI	✗	✓	✓	✗ commercial

---

MIT · macOS Tahoe 26.x · Apple Silicon · Python 3.10+ (ships with Xcode CLT)

Keywords: macOS debloat, macOS Tahoe debloat, Apple Silicon debloat, disable Apple Intelligence, disable Siri permanently, launchctl disable, free RAM macOS, mac performance mode, macOS privacy, kill Apple telemetry, macOS service manager, launchd console util, contextstored memory leak, Tahoe RAM usage, Apple Intelligence disable launchctl.