Glossary/macOS Keychain & security
Entitlements (macOS)
Entitlements are specific permissions a macOS app declares as part of its code signature, such as access to the Keychain, the network, or particular hardware. macOS checks these entitlements before granting the app the corresponding capability at runtime.
Why it matters
Because entitlements are baked into the signed app rather than granted after the fact by a user toggling a setting, they are harder to tamper with, changing them would break the app's signature.
Can I see an app's entitlements myself?
Yes, with developer tools like codesign -d --entitlements, though this is not something most users need to check.
Do entitlements replace the permission prompts I see?
No, some entitlements still trigger a one-time user prompt, such as the first time an app requests Keychain access.
Related
Looking for a different way to manage your keys? See the best Claude Code API key manager alternatives, or browse every term in the glossary.