TCC stands for Transparency, Consent, and Control, Apple’s macOS framework for managing access to sensitive resources. It mediates permission prompts for data such as contacts, calendars, camera, microphone, screen recording, Accessibility, and Full Disk Access. Rather than letting apps directly reach protected content, TCC decides whether a user has granted consent and whether the request fits Apple’s privacy policy.
TCC matters because it is a major trust boundary on Macs. Defenders rely on it to limit what software can read or control, and attackers often try to abuse or bypass it to steal data, capture input, or automate actions invisibly. In real environments, security teams review TCC-related permissions to spot overprivileged apps, especially tools with Accessibility or Full Disk Access. For defense, the key practice is least privilege: grant only the access a legitimate app truly needs, and remove permissions that are no longer justified.