Open-Source Utility 'RemoveMacAI' Purges macOS Apple Intelligence Models via Configuration Profiles and Loopback Redirection

Open-source tool RemoveMacAI provides a CLI and GUI workflow to purge Apple Intelligence assets, silence system telemetry, and reclaim storage on macOS 27 without disabling System Integrity Protection. The system couples state-journaled preference overrides with payload profiles that blackhole Apple asset downloads to closed local ports.

Architecture and Security Constraints

Developed by `omlahore` based on underlying asset mapping research by `4evy`, RemoveMacAI modifies system state while keeping System Integrity Protection (SIP) intact. The tool operates without altering the sealed system volume under `/System`, preserving bootability and avoiding OS integrity violations.

System modifications are bifurcated into managed configuration profiles and standard preference domain edits. Restricted system behaviors—including Apple Intelligence features and telemetry blocks—are deployed via an unsigned `.mobileconfig` profile that requires user approval in System Settings. Non-restricted per-user preferences are written directly to preference domains using standard defaults pipelines.

To enable complete reversibility, RemoveMacAI records the pre-execution value of every modified key inside a structured state log located at `~/Library/Application Support/RemoveMacAI/journal.json`. Executing an undo operation reads this journal to restore exact prior values, while removing the underlying configuration profile clears all managed restrictions simultaneously.

Asset Interception and Model Eviction

The primary objective of the utility is the complete removal of on-device model weights associated with Apple Intelligence, including Siri, Writing Tools, Xcode predictive completion, Genmoji, Image Playground, and local summaries across core applications.

Model sets are deleted directly through interaction with Apple's native asset service framework. To prevent macOS from automatically re-downloading purged model assets in the background, the deployed configuration profile alters asset service resolution, redirecting outgoing download requests to a closed local port. This loopback redirection ensures the OS asset pipeline fails cleanly without requiring persistent third-party network daemons.

Disk Space Reclamation Engine

Because SIP remains active, built-in system applications reside on read-only system volumes and cannot be uninstalled or mass-unloaded. RemoveMacAI bypasses this limitation by targeting user-deletable optional applications, build artifacts, and secondary storage caches.

Space recovery actions rely on native system utilities where appropriate. Stale simulator runtimes are purged via `simctl`, and local APFS snapshots are pruned via `tmutil`. The storage cleaner targets several non-system directories:

• Xcode build data, derived data, and legacy device support files
• Cached macOS installers, aerial video wallpapers, and iOS/iPadOS software update images
• Optional Apple suite applications (GarageBand, iMovie, Keynote, Numbers, Pages) and associated sound libraries
• Non-system background launch items, such as third-party application auto-updaters

File deletion workflows stage target assets into the system Trash by default to allow manual verification prior to permanent removal.

MDM Orchestration and State Auditing

For enterprise administrators managing Apple endpoints, RemoveMacAI exposes a CLI flag (`removemacai export`) to compile managed settings into stand-alone configuration profiles compatible with Jamf, Kandji, and Microsoft Intune.

Command-line parameters allow administrators to scope profile restrictions selectively. Commands like `removemacai export AI-off.mobileconfig --keep writing-tools` generate payloads that disable core model sets while preserving specific utility subsets. Per-user settings that fall outside MDM payload boundaries must be executed locally via command-line invocation (`removemacai apply`).

For compliance auditing, the CLI binary includes a JSON output flag (`removemacai tweaks --json`). This serializes the exact state of every system flag, profile lock, and telemetry toggle into a standard JSON payload suitable for consumption by automated endpoint security scripts.